An error occurred InvalidParameterException when calling the PutSubscriptionFilter operation destinationArn for vendor lambda cannot be used with roleArn

This error occurs when you try to create a subscription filter in AWS CloudWatch Logs with a destinationArn for a vendor lambda function, but you also provide a roleArn.

The destinationArn parameter is used to specify the Amazon Resource Name (ARN) of the destination to deliver the filtered log events to. This can be an Amazon Kinesis stream, an AWS Lambda function, or an Amazon Simple Notification Service (SNS) topic.

However, when you specify a vendor lambda function as the destination, you should not provide a roleArn. The role for the vendor lambda function is already defined within the function itself and does not need to be specified separately.

To fix this error, remove the roleArn parameter when creating the subscription filter for the vendor lambda function in CloudWatch Logs