What are listed downstream resources based on?
the IAM user
the execution policy
the Lambda configuration
the Lambda nodes