in sap-data-intelligence-3/lib/cdk-eks-stack.ts [129:137]
function createDeployRole(scope: core.Construct, id: string, cluster: eks.Cluster): iam.Role {
const role = new iam.Role(scope, id, {
roleName: PhysicalName.GENERATE_IF_NEEDED,
assumedBy: new iam.AccountRootPrincipal()
});
cluster.awsAuth.addMastersRole(role);
return role;
}