Resources:
  Function:
    Type: AWS::Lambda::Function
    Properties:
      Code: s3://bucket/code.zip
      Role: !GetAtt Role.Arn
      Runtime: provided.al2023
  Role:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: lambda.amazonaws.com
            Action: "sts:AssumeRole"
