diff --git a/action/task-def-formation.yml b/action/task-def-formation.yml
index e2efe120..bf2b9418 100644
--- a/action/task-def-formation.yml
+++ b/action/task-def-formation.yml
@@ -89,10 +89,11 @@ Resources:
   CloudWatchIAMRole:
     Type: 'AWS::IAM::Role'
     Properties:
-      Statement:
-      - Effect: "Allow"
-        Action: "kinesis:PutRecord"
-        Resource: !Ref 'KinesisStream'
+      AssumeRolePolicyDocument:
+        Statement:
+        - Effect: "Allow"
+          Action: "kinesis:PutRecord"
+          Resource: !Ref 'KinesisStream'
 
   KinesisStream:
     Type: AWS::Kinesis::Stream