AWS Lambda Function with a generated name, using a CloudFormation-managed LogGroup

lambda-with-loggroup.yaml

Resources:
  Role:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal: {Service: lambda.amazonaws.com}
  Function:
    Type: AWS::Lambda::Function
    Properties:
      Code:
        ZipFile: "#todo"
      Handler: "index.handler"
      Role: !GetAtt Role.Arn
      Runtime: "python3.8"
  LogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Sub "/aws/lambda/${Function}"
  LogPolicy:
    Type: AWS::IAM::Policy
    Properties:
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Action:
              - logs:CreateLogStream
              - logs:PutLogEvents
            Effect: Allow
            Resource: !GetAtt LogGroup.Arn
      PolicyName: !Sub "${Function}-logs"
      Roles: [!Ref Role]