As part of our initial AWS account deployment, we create a some base IAM roles using CloudFormation. One of those roles is assumed by automation tasks to perform admin functions
