existing role is not detected on redeploy

If I make a lambda function, without specifying the role in the serverless.yml config file, a default role is created.
If I modify the permissions of this role, then redploy, those permissions are clobbered and the log messages of deployment say `IAM Role not found.  Creating or updating a default role with the name:`