On the right menu, locate and click on Roles
Then click on Create Role

For section Select trusted entity choose AWS Service.
For Use Case select Lambda from the dropdown.

LambdaWatermarkS3 to attach.
Next, name the role as LambdaWatermarkS3Role

Review and click on Create Role

Finish Creating IAM Role

Great, now let’s go ahead and create our Lambda function.