Race condition when using self managed deployment type

[tabrezm]

I'm hitting a race condition when using a self managed deployment. It looks like the stack set resource starts deploying before the IAM role is ready, resulting in the following error message:

Resource handler returned message: "Resource of type 'Stack set operation [133a0012-7a7e-4ca6-a253-622c36c8d8d8] was unexpectedly stopped or failed. status reason(s): [Account <REDACTED> should have 'AWSCloudFormationStackSetExecutionRole' role with trust relationship to Role '<REDACTED>-AdminRole38563C57-xWR5IEOHv72o'.]' with identifier '<REDACTED>StackSet0EB2B840:bebe8bba-591e-4dd4-a637-1d631421d4d8' did not stabilize."

If I pre-create the admin role and specify it in the StackSet resource, it deploys successfully. Note that it does expose another minor issue, where a duplicate policy is always added to the role.