User: arn:aws:iam::187354226259:user/kk_labs_user_660944 is not authorized to perform: iam:PassRole

moustafaroushdy1 · November 18, 2025, 9:32am

AWS Level 3, Task 10, Lab link https://engineer.kodekloud.com/task?id=66c8355962c47b73157af9bb&status=start

raymond.baoly · November 18, 2025, 9:46am

Please try again and follow the steps in this document. There are some rules for creating an EKS cluster in KodeKloud labs.

github.com

kodekloudhub/certified-kubernetes-administrator-course/blob/master/managed-clusters/eks/console/docs/02-create-service-role.md

# Create the Service Role

Note that various information pop-ups may appear at the top of the console screen as you do things and may obscure other items. Dismiss these when they appear.

Before creating an EKS cluster you need to create a Cluster service IAM (Identity and Access Management) role. This grants permissions for the EKS service to access AWS APIs on your behalf.

1. Navigate to the IAM console
    1. Click in the search box and type `iam`
    1. Click on `IAM` in the result list

    ![](../images/02-iam.png)

1. Click on `Roles` in the left menu
1. Click on orange `Create Role` button towards the top right
1. On the next screen `AWS Service` should be selected. If not, click on it to select.
1. In the `Use case` box, click on `Choose a service or use case` and type `eks`. EKS should come up in the list. Click on it.
1. In the list of radio buttons that will now appear, ensure `EKS - Cluster` is selected. It should now look like this:

    ![](../images/02-trusted-entity.png)

This file has been truncated. show original