diff --git a/packages/serverless-deploy-iam/bin/app.ts b/packages/serverless-deploy-iam/bin/app.ts
index 5783e3a..46abc07 100644
--- a/packages/serverless-deploy-iam/bin/app.ts
+++ b/packages/serverless-deploy-iam/bin/app.ts
@@ -175,7 +175,7 @@ export class ServiceDeployIAM extends cdk.Stack {
                     {
                          name: 'IAM',
                          prefix: `arn:aws:iam::${accountId}:role`,
-                         qualifiers: [`*${serviceName}*`],
+                         qualifiers: [`${serviceName}*`, `Cognito-${serviceName}*`],
                          actions: [
                               "iam:CreateRole",
                               "iam:PassRole",