Update assume role policy document for existing role in SAM template

Question

As part of our initial AWS account deployment, we create a some base IAM roles using CloudFormation. One of those roles is assumed by automation tasks to perform admin functions