Data Action to Lambda returning 403 Forbidden

Hitting a 403 Forbidden when calling my Lambda from an Architect Data Action. The Lambda role has the invoke permission, and I’ve added the Genesys Cloud principal to the resource policy. Here’s the policy snippet I’m using:

{
“Effect”: “Allow”,
“Principal”: { “AWS”: “arn:aws:iam::123456789:role/genesys-cloud-integration” },
“Action”: “lambda:InvokeFunction”,
“Resource”: “*”
}

Still getting the access denied error in the logs. Am I missing a specific trust relationship setting?