How can I view cloudwatch permission?

Question

I use this command to add invoke lambda permission on cloudwatch:

aws lambda add-permission --function-name lambdaName \
  --statement-id test --action lambda:InvokeFunction \
  --principal logs.ap-southeast-2.amazonaws.com

what I don't understand is how I can view this permission on AWS console. I tried to look at cloudwatch but couldn't find anywhere about permission. And how can I convert it to cloudformation?

Answer 1

In console, you have to go to Permissions and look at Resource-based policy :