in source/per-stage-dns/lib/permission-boundary.ts [11:16]
public visit(construct: core.IConstruct): void {
if (construct instanceof iam.Role) {
const roleResource = construct.node.findChild('Resource') as iam.CfnRole;
roleResource.permissionsBoundary = this.permissionsBoundaryArn;
}
}