Hello KodeKloud Support Team,
I am facing an issue in the AWS EKS Lab while creating an EKS cluster.
Lab: AWS EKS Labs
IAM User:
arn:aws:iam::730335214540/kk_labs_user_930414
When I try to create the EKS cluster from the AWS Console, I receive the following error:
User: arn:aws:iam::730335214540:user/kk_labs_user_930414 is not authorized to perform: iam:PassRole on resource: arn:aws:iam::730335214540:role/AmazonEKSAutoClusterRole because no identity-based policy allows the iam:PassRole action.
I have verified the following:
The AmazonEKSAutoClusterRole exists.
The AmazonEKSAutoNodeRole has been created successfully.
I selected AmazonEKSAutoClusterRole as the Cluster IAM Role.
I selected AmazonEKSAutoNodeRole as the Node IAM Role.
My IAM user is kk_labs_user_930414.
I also noticed that my IAM user is attached to the policy AWS_EKSECSWithConditions, and several IAM actions are restricted. It appears that my user does not have the required iam:PassRole permission to pass the EKS cluster role.
Could you please verify whether this lab environment has been provisioned correctly and whether the required iam:PassRole permission is missing for my IAM user?
If this is a lab provisioning issue, could you please reset or update the IAM permissions for my lab account?