ReadOnlyAdmins were added to Lake Formation a couple years back, but CloudFormation does not have a setting for this in the DataLakeSettings construct. It only allows setting the Admins (full access ...