Managed Policy AWSConfigRole is deprected and replaced by AWS_ConfigRole. https://aws.amazon.com/blogs/mt/service-notice-upcoming-changes-required-for-aws-config/ Need to change the app.py else the CDK stack while deploying is giving error