### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

Basically we want to only run the lambda when an insert is occurring in DynamoDB.
I tested using Dynobase deleting a record and the lambda still triggered.

```
resource "aws_lambda_event_source_mapping" "event-log" {
	event_source_arn  = aws_dynamodb_table.event-log.stream_arn
	function_name     = module.main.lambda-arn
	starting_position = "LATEST"
	enabled = true # change to false when truncating the table in localstack
	maximum_retry_attempts = 1 # limit retry on failure to 1 for now

	# https://dev.to/aws-builders/filtering-dynamodb-streams-before-lambda-p5p
	filter_criteria { # Doesn't seem to work on LocalStack for now
		filter {
			pattern = jsonencode({
				body = {
					eventName : ["INSERT"]
				}
			})
		}
	}
}
```


### 🧑‍💻 Implementation

_No response_

### Anything else?

 https://dev.to/aws-builders/filtering-dynamodb-streams-before-lambda-p5p
)
        try:
            iam_client.delete_user(UserName=username)
        except Exception:
            LOG.debug("Error deleting user '%s' during test cleanup", username)
@pytest.fixture
def wait_and_assume_role(sts_client):
    def _wait_and_assume_role(role_arn: str, session_name: str = None):
        if not session_name:
            session_name = f"session-{short_uid()}"
        def assume_role():
            return sts_client.assume_role(RoleArn=role_arn, RoleSessionName=session_name)[
                "Credentials"
            ]
        
        keys = retry(assume_role, sleep=5, retries=4)
        return keys
    return _wait_and_assume_role
@pytest.fixture
def create_role(iam_client):
    role_names = []
    def _create_role(**kwargs):
        if not kwargs.get("RoleName"):
            kwargs["RoleName"] = f"role-{short_uid()}"
        result = iam_client.create_role(**kwargs)
        role_names.append(result["Role"]["RoleName"])
        return result
    yield _create_role
    for role_name in role_names: