Your company is implementing a new serverless application using AWS Lambda and Amazon API Gateway. You need to ensure that the API Gateway has the necessary permissions to invoke the Lambda functions. Which of the following steps should you take to achieve this?