What are listed downstream resources based on?
the Lambda configuration
the Lambda nodes
the IAM user
the execution policy