existing role is not detected on redeploy

[inverted-capital]

If I make a lambda function, without specifying the role in the serverless.yml config file, a default role is created.
If I modify the permissions of this role, then redploy, those permissions are clobbered and the log messages of deployment say IAM Role not found. Creating or updating a default role with the name: