updating permissions for lambda

Author: ilmarmur

source/cloudformation/s3auditor_cf.template

@@ -725,6 +725,7 @@ Resources:
             Principal:
               Service:
                 - lambda.amazonaws.com
+                - apigateway.amazonaws.com
             Condition: {}
             Action:
               - 'sts:AssumeRole'
@@ -735,6 +736,7 @@ Resources:
         - 'arn:aws:iam::aws:policy/AmazonOpenSearchServiceFullAccess'
         - 'arn:aws:iam::aws:policy/AmazonSSMReadOnlyAccess'
         - 'arn:aws:iam::aws:policy/AmazonSQSFullAccess'
+        - 'arn:aws:iam::aws:policy/service-role/AWSLambdaRole'
       Policies:
         - PolicyName: s3AuditorWriteToExportBucket
           PolicyDocument: