Logging All Lambda Function Invocations By Using Basic Event Selectors

resource "aws_cloudtrail" "example" {
  # ... other configuration ...

  event_selector {
    read_write_type           = "All"
    include_management_events = true 

    data_resource {
      type   = "AWS::Lambda::Function"
      values = ["arn:aws:lambda"]
    }
  }
}

AWSServiceRoleForCloudTrail

See also

• Terraform Cloudtrail: aws_cloudtrail, module
• AWS Lambda: aws lambda [ list-functions | create-function | update-function-code | create-alias ], AWS::Lambda::Function