### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

Basically we want to only run the lambda when an insert is occurring in DynamoDB.
I tested using Dynobase deleting a record and the lambda still triggered.

```
resource "aws_lambda_event_source_mapping" "event-log" {
	event_source_arn  = aws_dynamodb_table.event-log.stream_arn
	function_name     = module.main.lambda-arn
	starting_position = "LATEST"
	enabled = true # change to false when truncating the table in localstack
	maximum_retry_attempts = 1 # limit retry on failure to 1 for now

	# https://dev.to/aws-builders/filtering-dynamodb-streams-before-lambda-p5p
	filter_criteria { # Doesn't seem to work on LocalStack for now
		filter {
			pattern = jsonencode({
				body = {
					eventName : ["INSERT"]
				}
			})
		}
	}
}
```


### 🧑‍💻 Implementation

_No response_

### Anything else?

 https://dev.to/aws-builders/filtering-dynamodb-streams-before-lambda-p5p
if "security" not in path_payload:
            return None
        security_schemes = path_payload.get("security")
        for security_scheme in security_schemes:
            for security_scheme_name, _ in security_scheme.items():
                if security_scheme_name in body.get("securityDefinitions", []):
                    security_config = body.get("securityDefinitions", {}).get(security_scheme_name)
                    aws_apigateway_authorizer = security_config.get(
                        "x-amazon-apigateway-authorizer", {}
                    )
                    if not aws_apigateway_authorizer:
                        continue
                    if authorizers.get(security_scheme_name):
                        return authorizers.get(security_scheme_name)
                    authorizer = rest_api.create_authorizer(
                        create_resource_id(),
                        name=security_scheme_name,
                        authorizer_type=aws_apigateway_authorizer.get("type"),
                        provider_arns=None,
                        auth_type=security_config.get("x-amazon-apigateway-authtype"),
                        authorizer_uri=aws_apigateway_authorizer.get("authorizerUri"),
                        authorizer_credentials=aws_apigateway_authorizer.get(
                            "authorizerCredentials"