Status: IN
AWSLambdaBasicExecutionRole grants exactly three CloudWatch Logs actions: `logs:CreateLogGroup`, `logs:CreateLogStream`, and `logs:PutLogEvents` with `Resource: "*"`.
Source: entries/2026/03/12/aws-managed-policy-latest-reference-AWSLambdaBasicExecutionRolehtml.md