Added permission to codebuild-role in the deployment account to read AWS Organizations

Author: Stefano Montanelli

src/lambda_codebase/initial_commit/bootstrap_repository/adf-bootstrap/deployment/global.yml

@@ -320,6 +320,7 @@ Resources:
               - "sts:AssumeRole"
             Resource:
               - !Sub arn:${AWS::Partition}:iam::*:role/adf-readonly-automation-role
+              - !Sub arn:${AWS::Partition}:iam::*:role/adf/organizations/adf-organizations-readonly
             Condition:
               StringEquals:
                 aws:PrincipalOrgID: !Ref OrganizationId