infra: add CreateLogGroup permission to Lambdas
infra: add CreateLogGroup permission to Lambdas

Add this permission so Lambdas can actually create log groups on
CloudWatch.

vcapretz/superbowleto,vcapretz/superbowleto