The _provisioner_ and _authenticator_ lambdas should have cloudwatch retention rules appropriate for their application.
The provisioner and authenticator lambdas should have cloudwatch retention rules appropriate for their application.