Missing DependsOn: PipelinePolicy in the CodePipeline resource

[lestephane]

There could be race conditions in the creation of the pipeline, pipeline role, pipeline policy if the pipeline resource is missing a DependsOn on the policy.

This is documented at https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html

If a policy has a Ref to a role and if a resource (such as AWS::ECS::Service) also has a Ref to the
same role, add a DependsOn attribute to the resource so that the resource depends on the policy.
This dependency ensures that the role's policy is available throughout the resource's lifecycle. For
example, when you delete a stack with an AWS::ECS::Service resource, the DependsOn attribute
ensures that the AWS::ECS::Service resource can complete its deletion before its role's policy is
deleted.