We are using Kodekloud playgrounds to test our app in the AWS sandbox. We have to deploy it on AWS EKS for testing purposes. If it works well, then we will implement the IAC on the client’s AWS account. So here we developed a cloud formation template to create an AWS EKS cluster, but it shows the error that permission is denied for the kodekloud sandbox user. I couldn’t attach the permission to the role. I am attaching the error message here. I even tried to create the EKS cluster manually in Kodekloud AWS sandbox, but showing the same error that iam:PassRole couldn’t attach due to permission denied.
Error:
Resource handler returned message: “User: arn:aws:iam::xxxxxx:user/kk_labs_user_901268 is not authorized to perform: iam:PassRole on resource: arn:aws:iam::xxxxx:role/eks-EksRole-FFVp8Rt1gJhl because no identity-based policy allows the iam:PassRole action (Service: Eks, Status Code: 403, Request ID: 5ac7e5de-175a-46b8-8278-0d7fadecaa3b) (SDK Attempt Count: 1)” (RequestToken: d5f1ae40-cb20-8bd9-088a-03671a8216f9, HandlerErrorCode: AccessDenied)
Please help with this. We have to test the app in AWS EKS