Failed to create Imply Cloud cluster due to error "not authorized to perform: iam:PassRole on resource"

SYMPTOM : Failed to create Imply Cloud cluster due to error "not authorized to perform: iam:PassRole on resource"

ERROR : "4 minutes ago [CRITICAL]: Master1.ASGLaunchConfiguration: API: autoscaling:CreateLaunchConfiguration User: arn:aws:sts::1234567:assumed-role/imply-cloud-manager/1234567-12345-1234-b678 is not authorized to perform: iam:PassRole on resource: arn:aws:iam::1234567:role/imply-cloud-instance"

ROOT CAUSE : This is an IAM policy misconfiguration issue. The manager role does not have permission to use imply-cloud-instance as the instance role for the EC2 instances it creates.

RESOLUTION : In imply-cloud-manager policy, there should be a statement that looks like this:

{
"Effect": "Allow",
"Action": "iam:PassRole",
"Resource": "arn:aws:iam::1234567:role/imply-cloud-instance"
}