[Guidance] Ran the easy_setup but failed due to insufficient permission of IAM role"sra-codebuild-role"

[fryce]

The Question

Using easy_setup to deploy Guardduty solution, the CodeBuild project of initiated by SRA stopped with failure with the message saying sra-codebuild-role is not existing or not having enough permissions. -- Checked the IAM console, during the CodeBuild process, the role was created so seems it's insufficient permission problem.

Anyone faced same error before or any idea what steps might be missing from me?

Environment

(All the steps were executed in management account)

1. New AWS org, installed the CfCT resources (the pipeline services)
2. Uploaded the easy_setup yaml file to the CfCT CodeCommit repo
3. Updated the manifest file in the CfCT CodeCommit repo
4. Fulfilled the pre-req
5. Turned on the GuardDuty solution by editing the parameter in manifest file
6. Committed and pushed the changes to CodeCommit
7. When deploying, the error occurred