IAM is not configured properly

[92nqb]

During landing zone setup, the following error occurs:

aws:iam:AccountPasswordPolicy (account-audit):
    error: 1 error occurred:
        * error configuring Terraform AWS Provider: IAM Role (arn:aws:iam::<account id>:role/root) cannot be assumed.
    
    There are a number of possible causes of this - the most common are:
      * The credentials used in order to assume the role are invalid
      * The credentials do not have appropriate permission to assume the role
      * The role ARN is not valid
    
    Error: operation error STS: AssumeRole, https response error StatusCode: 403, RequestID: 0529cbfe-21c8-47d6-8954-6b4f21eec46f, api error AccessDenied: User: arn:aws:iam::<id>:user/<user> is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::<id>:role/root

It should be a race condition because if you re-run a pulumi up it is fixed.