Unable to create Role with aws iam create-role

Question

I am getting the following error as below when command is ran:

$ aws iam create-role --role-name AmazonEKSNodeRole --assume-role-policy-document file://"iam-policy.json"

An error occurred (LimitExceeded) when calling the CreateRole operation: Cannot exceed quota for ACLSizePerRole: 2048

Accepted Answer

As per [the documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html), the default quota for "Role trust policy length" is 2048 characters. You can adjust this to a maximum of 4096 characters. To do so:

> To request a quota increase, sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/. In the navigation pane, choose AWS services. On the navigation bar, choose the US East (N. Virginia) Region. Then search for IAM. Choose AWS Identity and Access Management (IAM), choose the *Role trust policy length* quota, and follow the directions to request a quota increase. For more information, see Requesting a Quota Increase in the Service Quotas User Guide.

Answer

https://us-east-1.console.aws.amazon.com/servicequotas/home/services/iam/quotas/L-C07B4B0D

Answer

사용중인 리전이 다른리전이라해도, IAD(즉, us-east-1)으로 리전변경 하셔야만  AWS Identity and Access Management(IAM) 보이십니다.

[AWS Services ](https://console.aws.amazon.com/servicequotas/
)> AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20으로 증가해주세요.

You should be changing the region. The service itself is only in IAD(i.e., us-east-1), since it's a global service (I presume)

[AWS Services](https://console.aws.amazon.com/servicequotas/
) > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20

Thanks

Unable to create Role with aws iam create-role

Relevant content