4. At the ARN interface
5. Name the Policy
6. Choose Create policy
7. At the IAM interface
8. Choose AWS Service
9. Choose Lambda service
10. At Add permissions