For Tutorial, are we missing passing in AWS-managed provisioning role ...