When can you change the execution role of a Lambda?
only at creation
only before deployment
never
anytime via configuration