TIL: don't share roles between @awscloud
lambdas. https://github.com/awslabs/aws-cdk/issues/205

It's tempting, especially when gradually converting from manually managed
resources but makes it harder to manage stacks.