diff --git a/src/control-tower/control-tower-landing-zone.ts b/src/control-tower/control-tower-landing-zone.ts index d492583..c7af3c2 100644 --- a/src/control-tower/control-tower-landing-zone.ts +++ b/src/control-tower/control-tower-landing-zone.ts @@ -238,7 +238,7 @@ export class ControlTowerLandingZone extends Construct { roleName: 'AWSControlTowerAdmin', assumedBy: new iam.ServicePrincipal('controltower.amazonaws.com'), managedPolicies: [ - iam.ManagedPolicy.fromAwsManagedPolicyName('AWSControlTowerAdmin'), + iam.ManagedPolicy.fromAwsManagedPolicyName('AWSControlTowerServiceRolePolicy'), ], }) : iam.Role.fromRoleName(this, 'ControlTowerAdminRole', 'AWSControlTowerAdmin');