AWS X-Ray serverless plugin

Hello! I am using serverless with serverless-tracing-plugin to enable AWS XRay on my lambda
but it only seems to work then i set IAM role statements as this:
{
“Effect”: “Allow”,
“Action”: [
“xray:PutTraceSegments”,
“xray:PutTelemetryRecords”
],
“Resource”: “*”
}
How do I scope down permissions for Xray? Like with what should I replace * in Resourse
Replacing this with lambda arn doesn’t work