Resources: WorkflowsLambdaExecutionRole: Type: AWS::IAM::Role Properties: AssumeRolePolicyDocument: Version: '2012-10-17' Statement: - Effect: Allow Principal: Service: - lambda.amazonaws.com Action: - sts:AssumeRole ManagedPolicyArns: - Fn::Sub: arn:${AWS::Partition}:iam::aws:policy/service-role/AWSLambdaRole WorkflowsCustomStepLambda: Type: AWS::Lambda::Function Properties: Code: ZipFile: | def handler(event, context): print(event) return { 'message': 'Hello, world' } Handler: index.handler Role: Fn::GetAtt: WorkflowsLambdaExecutionRole.Arn Runtime: python3.8 Outputs: WorkflowsCustomStepLambda: Value: Fn::GetAtt: WorkflowsCustomStepLambda.Arn Export: Name: awstransferworkflowcto1