fix: Dont depend on default execution role when custom role provided

Author: pgrzesik

lib/plugins/aws/provider.js

@@ -1625,9 +1625,10 @@ class AwsProvider {
         return customRole['Fn::GetAtt'][0];
       }
       if (
-        // otherwise, check if we have an import or parameters ref
+        // otherwise, check if we have an import, parameters ref or sub
         customRole['Fn::ImportValue'] ||
-        customRole.Ref
+        customRole.Ref ||
+        customRole['Fn::Sub']
       ) {
         return null;
       }

test/unit/lib/plugins/aws/package/compile/events/sqs.test.js

@@ -643,4 +643,36 @@ describe('AwsCompileSQSEvents #2', () => {
       expect(eventSourceMappingResource.Properties.MaximumBatchingWindowInSeconds).to.equal(100);
     });
   });
+
+  it('should not depend on default IAM role when custom role defined', async () => {
+    const { awsNaming, cfTemplate } = await runServerless({
+      fixture: 'function',
+      configExt: {
+        provider: {
+          iam: {
+            role: {
+              'Fn::Sub': 'arn:aws:iam::${AWS::AccountId}:role/iam-role-name',
+            },
+          },
+        },
+        functions: {
+          foo: {
+            events: [
+              {
+                sqs: {
+                  arn: 'arn:aws:sqs:region:account:MyQueue',
+                },
+              },
+            ],
+          },
+        },
+      },
+      command: 'package',
+    });
+
+    const queueLogicalId = awsNaming.getQueueLogicalId('foo', 'MyQueue');
+    const eventSourceMappingResource = cfTemplate.Resources[queueLogicalId];
+
+    expect(eventSourceMappingResource.DependsOn).to.deep.equal([]);
+  });
 });