[cloudformation] use platform role instead of platform::base