log_fliter is used to filter logs that is internal access of aws, just keep access logs from remote IP addresses.
lambda role permission: fulls3, cloudwatch
trigger: when s3 object is created
trigger: cloudwatch scheduled events: corn(0 * * * ? *)