In the generated GitHub Actions pipeline sam deploy deletes the user it is using?

[traceon]

In one of the steps in the generated (using sam pipeline init --bootstrap) GitHub Actions pipeline, when sam deploy is executed, I am seeing the error below.

Looks like the changeset includes deletion of the IAM user. It this correct, or am I missing something?

Uploading to 3b51c213b2fb7dc02c2e018e7c176044  15930 / 15930  (100.00%)
	Deploying with following values
	===============================
	Stack name                   : aws-sam-cli-managed-dev-pipeline-resources
	Region                       : us-east-1
	Confirm changeset            : False
	Disable rollback             : True
	Deployment s3 bucket         : aws-sam-cli-managed-dev-pipeline-artifactsbucket-hh9vor9lhsm9
	Capabilities                 : ["CAPABILITY_IAM"]
	Parameter overrides          : {}
	Signing Profiles             : {}
Initiating deployment
=====================
Uploading to 50d79b515481ad2f94af0adf48b8fc61.template  1527 / 1527  (100.00%)
Waiting for changeset to be created..
CloudFormation stack changeset
-------------------------------------------------------------------------------------------------
Operation                LogicalResourceId        ResourceType             Replacement            
-------------------------------------------------------------------------------------------------
+ Add                    HelloWorldFunctionHell   AWS::Lambda::Permissio   N/A                    
                         oWorldPermissionProd     n                                               
+ Add                    HelloWorldFunctionRole   AWS::IAM::Role           N/A                    
+ Add                    HelloWorldFunction       AWS::Lambda::Function    N/A                    
+ Add                    ServerlessRestApiDeplo   AWS::ApiGateway::Deplo   N/A                    
                         ymentd4d193690c          yment                                           
+ Add                    ServerlessRestApiProdS   AWS::ApiGateway::Stage   N/A                    
                         tage                                                                     
+ Add                    ServerlessRestApi        AWS::ApiGateway::RestA   N/A                    
                                                  pi                                              
+ Add                    TransactionTable         AWS::DynamoDB::Table     N/A                    
- Delete                 ArtifactsBucketPolicy    AWS::S3::BucketPolicy    N/A                    
- Delete                 ArtifactsBucket          AWS::S3::Bucket          N/A                    
- Delete                 ArtifactsLoggingBucket   AWS::S3::BucketPolicy    N/A                    
                         Policy                                                                   
- Delete                 ArtifactsLoggingBucket   AWS::S3::Bucket          N/A                    
- Delete                 CloudFormationExecutio   AWS::IAM::Role           N/A                    
                         nRole                                                                    
- Delete                 ImageRepository          AWS::ECR::Repository     N/A                    
- Delete                 PipelineExecutionRoleP   AWS::IAM::Policy         N/A                    
                         ermissionPolicy                                                          
- Delete                 PipelineExecutionRole    AWS::IAM::Role           N/A                    
- Delete                 PipelineUserAccessKey    AWS::IAM::AccessKey      N/A                    
- Delete                 PipelineUserSecretKey    AWS::SecretsManager::S   N/A                    
                                                  ecret                                           
- Delete                 PipelineUser             AWS::IAM::User           N/A                    
-------------------------------------------------------------------------------------------------
Changeset created successfully. arn:aws:cloudformation:us-east-1:***:changeSet/samcli-deploy1654520872/f21216a8-42e7-4df5-86df-14cdeb94b167
2022-06-06 13:08:03 - Waiting for stack create/update to complete
CloudFormation events from stack operations
-------------------------------------------------------------------------------------------------
ResourceStatus           ResourceType             LogicalResourceId        ResourceStatusReason   
-------------------------------------------------------------------------------------------------
CREATE_IN_PROGRESS       AWS::IAM::Role           HelloWorldFunctionRole   -                      
CREATE_IN_PROGRESS       AWS::IAM::Role           HelloWorldFunctionRole   Resource creation      
                                                                           Initiated              
CREATE_IN_PROGRESS       AWS::DynamoDB::Table     TransactionTable         -                      
CREATE_IN_PROGRESS       AWS::DynamoDB::Table     TransactionTable         Resource creation      
                                                                           Initiated              
CREATE_COMPLETE          AWS::IAM::Role           HelloWorldFunctionRole   -                      
CREATE_IN_PROGRESS       AWS::Lambda::Function    HelloWorldFunction       -                      
CREATE_IN_PROGRESS       AWS::Lambda::Function    HelloWorldFunction       Resource creation      
                                                                           Initiated              
CREATE_COMPLETE          AWS::Lambda::Function    HelloWorldFunction       -                      
CREATE_IN_PROGRESS       AWS::ApiGateway::RestA   ServerlessRestApi        -                      
                         pi                                                                       
CREATE_IN_PROGRESS       AWS::ApiGateway::RestA   ServerlessRestApi        Resource creation      
                         pi                                                Initiated              
CREATE_COMPLETE          AWS::ApiGateway::RestA   ServerlessRestApi        -                      
                         pi                                                                       
CREATE_COMPLETE          AWS::DynamoDB::Table     TransactionTable         -                      
CREATE_IN_PROGRESS       AWS::Lambda::Permissio   HelloWorldFunctionHell   -                      
                         n                        oWorldPermissionProd                            
CREATE_IN_PROGRESS       AWS::ApiGateway::Deplo   ServerlessRestApiDeplo   -                      
                         yment                    ymentd4d193690c                                 
CREATE_IN_PROGRESS       AWS::Lambda::Permissio   HelloWorldFunctionHell   Resource creation      
                         n                        oWorldPermissionProd     Initiated              
CREATE_IN_PROGRESS       AWS::ApiGateway::Deplo   ServerlessRestApiDeplo   Resource creation      
                         yment                    ymentd4d193690c          Initiated              
CREATE_COMPLETE          AWS::ApiGateway::Deplo   ServerlessRestApiDeplo   -                      
                         yment                    ymentd4d193690c                                 
CREATE_IN_PROGRESS       AWS::ApiGateway::Stage   ServerlessRestApiProdS   -                      
                                                  tage                                            
CREATE_IN_PROGRESS       AWS::ApiGateway::Stage   ServerlessRestApiProdS   Resource creation      
                                                  tage                     Initiated              
CREATE_COMPLETE          AWS::ApiGateway::Stage   ServerlessRestApiProdS   -                      
                                                  tage                                            
CREATE_COMPLETE          AWS::Lambda::Permissio   HelloWorldFunctionHell   -                      
                         n                        oWorldPermissionProd                            
UPDATE_COMPLETE_CLEANU   AWS::CloudFormation::S   aws-sam-cli-managed-     -                      
P_IN_PROGRESS            tack                     dev-pipeline-resources                          
DELETE_IN_PROGRESS       AWS::SecretsManager::S   PipelineUserSecretKey    -                      
                         ecret                                                                    
DELETE_IN_PROGRESS       AWS::IAM::Policy         PipelineExecutionRoleP   -                      
                                                  ermissionPolicy                                 
DELETE_IN_PROGRESS       AWS::S3::BucketPolicy    ArtifactsLoggingBucket   -                      
                                                  Policy                                          
DELETE_IN_PROGRESS       AWS::S3::BucketPolicy    ArtifactsBucketPolicy    -                      
DELETE_COMPLETE          AWS::S3::BucketPolicy    ArtifactsBucketPolicy    -                      
DELETE_COMPLETE          AWS::IAM::Policy         PipelineExecutionRoleP   -                      
                                                  ermissionPolicy                                 
DELETE_COMPLETE          AWS::S3::BucketPolicy    ArtifactsLoggingBucket   -                      
                                                  Policy                                          
DELETE_IN_PROGRESS       AWS::ECR::Repository     ImageRepository          -                      
DELETE_SKIPPED           AWS::S3::Bucket          ArtifactsBucket          -                      
DELETE_COMPLETE          AWS::SecretsManager::S   PipelineUserSecretKey    -                      
                         ecret                                                                    
DELETE_IN_PROGRESS       AWS::IAM::AccessKey      PipelineUserAccessKey    -                      
DELETE_COMPLETE          AWS::IAM::AccessKey      PipelineUserAccessKey    -                      
DELETE_SKIPPED           AWS::S3::Bucket          ArtifactsLoggingBucket   -                      
DELETE_COMPLETE          AWS::ECR::Repository     ImageRepository          -                      
DELETE_IN_PROGRESS       AWS::IAM::Role           PipelineExecutionRole    -                      
DELETE_IN_PROGRESS       AWS::IAM::Role           CloudFormationExecutio   -                      
                                                  nRole                                           
DELETE_COMPLETE          AWS::IAM::Role           CloudFormationExecutio   -                      
                                                  nRole                                           
DELETE_COMPLETE          AWS::IAM::Role           PipelineExecutionRole    -                      
Describing stack events for aws-sam-cli-managed-dev-pipeline-resources failed: An error occurred (InvalidClientTokenId) when calling the DescribeStacks operation: The security token included in the request is invalid.
-------------------------------------------------------------------------------------------------
Failed to deploy. Automatic rollback disabled for this deployment.
Actions you can take next
=========================
[*] Fix issues and try deploying again
[*] Roll back stack to the last known stable state: aws cloudformation rollback-stack --stack-name aws-sam-cli-managed-dev-pipeline-resources
Error: Failed to create/update the stack: aws-sam-cli-managed-dev-pipeline-resources, Waiter StackUpdateComplete failed: An error occurred (InvalidClientTokenId): The security token included in the request is invalid.
Error: Process completed with exit code 1.

[traceon]

Wrong repo, asked here: aws/aws-sam-cli#3938