What are listed downstream resources based on?
the IAM user
the Lambda nodes
the Lambda configuration
the execution policy