Serverless add assumed role to allow cloudwatch to call lambda

Question

I am trying to allow cloudwatch to execute a lambda function in a serverless.yml. I can do this via the CLI. How can I do this within a serverless.yml?

CLI command fr