update StatementId to replace / with -

template.yaml

@@ -1706,7 +1706,7 @@ Resources:
                                 if not LambdaPremissionPreFix:
                                   response = self.aws_lambda.remove_permission(
                                       FunctionName=lambda_arn,
-                                      StatementId=f"allow-trigger-from-{log_group}"
+                                      StatementId=f'allow-trigger-from-{log_group.replace("/", "-")}'
                                   )
                     if self.event['RequestType'] in ['Create', 'Update']:
                       if LambdaPremissionPreFix and LambdaPremissionPreFix != [""]:
@@ -1731,7 +1731,7 @@ Resources:
                             if not response.get("subscriptionFilters") or response.get("subscriptionFilters")[0].get("destinationArn") != lambda_arn:
                                 response = self.aws_lambda.add_permission(
                                     FunctionName=lambda_arn,
-                                    StatementId=f'allow-trigger-from-{log_group}',
+                                    StatementId=f'allow-trigger-from-{log_group.replace("/", "-")}',
                                     Action='lambda:InvokeFunction',
                                     Principal='logs.amazonaws.com',
                                     SourceArn=f'arn:aws:logs:{region}:{account_id}:log-group:{log_group}:*',
@@ -1852,4 +1852,4 @@ Resources:
                 case _:
                     raise ValueError(f"invalid or unsupported custom resource command: {command}")
             
-            return
+            return