diff --git a/tests/ci/cdk/README.md b/tests/ci/cdk/README.md
index 88ad555214..c03b920a9d 100644
--- a/tests/ci/cdk/README.md
+++ b/tests/ci/cdk/README.md
@@ -71,6 +71,12 @@ If not done previously, bootstrap cdk before running the commands below:
 cdk bootstrap aws://${AWS_ACCOUNT_ID}/us-west-2
 ```
 
+You may also need to request an increase to certain account quotas:
+```shell
+open https://${CDK_DEPLOY_REGION}.console.aws.amazon.com/servicequotas/home/services/ec2/quotas
+```
+* **EC2-VPC Elastic IPs** = 20
+
 Note: `GITHUB_REPO_OWNER` specifies the GitHub repo targeted by this CI setup.
 * https://github.com/${GITHUB_REPO_OWNER}/aws-lc.git
 
diff --git a/tests/ci/cdk/cdk/aws_lc_ec2_test_framework_ci_stack.py b/tests/ci/cdk/cdk/aws_lc_ec2_test_framework_ci_stack.py
index 81be51dfd2..709d2c4a7f 100644
--- a/tests/ci/cdk/cdk/aws_lc_ec2_test_framework_ci_stack.py
+++ b/tests/ci/cdk/cdk/aws_lc_ec2_test_framework_ci_stack.py
@@ -85,7 +85,7 @@ def __init__(self,
                                 iam.ManagedPolicy.from_aws_managed_policy_name("CloudWatchAgentServerPolicy")
                             ])
         iam.CfnInstanceProfile(scope=self, id="{}-ec2-profile".format(id),
-                               roles=["{}-ec2-role".format(id)],
+                               roles=[ec2_role.role_name],
                                instance_profile_name="{}-ec2-profile".format(id))
 
         # create vpc for ec2s