lambda Invoke

[toadkicker]

On the sign up form I'm getting back this error:

{"Message":"User: arn:aws:sts::009825708026:assumed-role/Cognito_toadkicker_poolUnauth_Role/CognitoIdentityCredentials is not authorized to perform: lambda:InvokeFunction on resource: arn:aws:lambda:us-east-1:009825708026:function:LambdAuthCreateUser"}

Reviewing IAM it seems the policies were attached as expected. Where else can I look?

[toadkicker]

I ended up removing what the script creates and retrying with much better success.