AWS IAM Error: "iam:PassRole" Permission Denied - How to Fix

This error message indicates that the IAM role "arn:aws:sts::925412301675:assumed-role/AWSReservedSSO_AWSPowerUserAccess_6af6acbce53da99c/yunhui" does not have the necessary permission to perform the "iam:PassRole" action on the resource "arn:aws:iam::925412301675:role/pf_lambda_role".\n\nTo resolve this issue, you need to modify the identity-based policy associated with the IAM role to include the "iam:PassRole" action for the specific resource.\n\nHere are the steps to add the required permission:\n\n1. Sign in to the AWS Management Console using an account with administrative access.\n2. Open the IAM console.\n3. Navigate to the "Roles" section.\n4. Search and select the role "AWSReservedSSO_AWSPowerUserAccess_6af6acbce53da99c/yunhui".\n5. Click on the "Permissions" tab.\n6. Under "Permissions policies", select the identity-based policy that allows the necessary permissions.\n7. Click on "Edit policy".\n8. Locate the "Action" section and add "iam:PassRole" to the list of actions.\n9. In the "Resource" section, specify the ARN of the "pf_lambda_role" role: "arn:aws:iam::92412301675:role/pf_lambda_role".\n10. Save the changes to the policy.\n\nAfter following these steps, the IAM role should have the required permission to perform the "iam:PassRole" action on the specified resource.