ALB触发器Lamda函数缺少权限CDK

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "lambda:InvokeFunction"
            ],
            "Resource": "arn:aws:lambda:REGION:ACCOUNT_ID:function:FUNCTION_NAME"
        }
    ]
}

import * as cdk from 'aws-cdk-lib';
import { Role, ServicePrincipal, PolicyStatement } from 'aws-cdk-lib/aws-iam';
import { LambdaFunction } from 'aws-cdk-lib/aws-lambda';
import { ApplicationLoadBalancer, ApplicationProtocol, TargetGroup } from 'aws-cdk-lib/aws-elasticloadbalancingv2';

const app = new cdk.App();
const stack = new cdk.Stack(app, 'MyStack');

// 创建Lambda函数
const myLambda = new LambdaFunction(stack, 'MyLambda', {
    runtime: cdk.Runtime.NODEJS_14_X,
    handler: 'index.handler',
    code: cdk.Code.fromAsset('lambda')
});

// 创建IAM角色并附加权限策略
const lambdaExecutionRole = new Role(stack, 'LambdaExecutionRole', {
    assumedBy: new ServicePrincipal('lambda.amazonaws.com')
});

lambdaExecutionRole.addToPolicy(new PolicyStatement({
    effect: cdk.aws_iam.Effect.ALLOW,
    actions: ['lambda:InvokeFunction'],
    resources: [myLambda.functionArn]
}));

// 配置ALB目标组
const targetGroup = new TargetGroup(stack, 'MyTargetGroup', {
    targetType: cdk.aws_elasticloadbalancingv2.TargetType.LAMBDA,
    targets: [{ id: myLambda.functionArn }]
});

// 创建ALB并关联目标组
const alb = new ApplicationLoadBalancer(stack, 'MyALB', {
    internetFacing: true,
    protocol: ApplicationProtocol.HTTP,
    defaultTargetGroup: targetGroup
});

app.synth();