diff --git a/terraform/apigateway.tf b/terraform/apigateway.tf
index c58ade3..c182974 100644
--- a/terraform/apigateway.tf
+++ b/terraform/apigateway.tf
@@ -123,3 +123,13 @@ resource "aws_lambda_permission" "admin_authorizer" {
   principal     = "apigateway.amazonaws.com"
   source_arn    = "${aws_apigatewayv2_api.order_api.execution_arn}/authorizers/${aws_apigatewayv2_authorizer.admin_google.id}"
 }
+
+# PLAT-102 follow-up: role already deleted in AWS after apply failed on
+# iam:ListInstanceProfilesForRole. Drop from state without a destroy call.
+removed {
+  from = aws_iam_role.admin_authorizer_invoke
+
+  lifecycle {
+    destroy = false
+  }
+}