This pic below describes a statement that allows Amazon S3 to invoke a function name my-function for a bucket name my-bucket in account 123456789012 aws-lambda-resouce-based-policies