The permission should contain both the original cloud9 permission/trust relationships and permission for TwinMaker.
aws-cdk CLI might need to be updated for cdk deploy. For latest aws-cdk CLI, t2.micro might not have enough memory. Maybe should update to t2.medium/t2.large.
link https://github.com/aws-samples/aws-iot-twinmaker-samples/blob/main/CLOUD9_SETUP.md