title: Service is unable to assume a role error - AWS Glue cloudformation creation with JDBC target
body: <pre><code>Resources:
    GlueCrawlerRole:
      Type: 'AWS::IAM::Role'
      Properties:
        AssumeRolePolicyDocument:
          Version: 2012-10-17
          Statement:
            - Effect: Allow
              Principal:
                Service:
                  - glue.amazonaws.com
              Action:
                - 'sts:AssumeRole'
        Path: /service-role/
        ManagedPolicyArns:
          - 'arn:aws:iam::aws:policy/service-role/AWSGlueServiceRole'
        Policies:
          - PolicyName: GlueAccess
            PolicyDocument:
              Version: 2012-10-17
              Statement:
                - Sid: kmsKeyAccess
                  Effect: Allow
                  Action:
                   - 'kms:Encrypt'
                   - 'kms:Decrypt'
                   - 'kms:ReEncrypt*'
                   - 'kms:GenerateDataKey*'
                   - 'kms:DescribeKey'
                  Resource: !Ref KmsKeyArn
                - Sid: logKmsKey
                  Effect: Allow
                  Action:
                   - 'logs:AssociateKmsKey'
                  Resource: !Sub 'arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws-glue/:*'
  
  
  GlueCrawler:
      Type: 'AWS::Glue::Crawler'
      Properties:
        Name: !Sub '${AWS::StackName}'
        Role: !GetAtt GlueCrawlerRole.Arn
        DatabaseName: !Sub '${AWS::StackName}-database'
        Targets:
          S3Targets:
            - Path: !Ref MyS3Bucket
          JdbcTargets: 
            - 
              ConnectionName: &quot;XXXXXXX&quot;
              Path: &quot;ABCD/%&quot;
          DatabaseName: &quot;rds-xxxxx-abcd01-private-db&quot;
          SchemaChangePolicy: 
            UpdateBehavior: &quot;UPDATE_IN_DATABASE&quot;
            DeleteBehavior: &quot;DEPRECATE_IN_DATABASE&quot;
          TablePrefix: &quot;aurora_rds_&quot;
  
  </code></pre>
  <p>&lt;&gt;
  Service is unable to assume role arn:aws:iam::xxxxxxxxxx:role/cua-enterprise-data-hub-dev-test-g-GlueCrawlerRole-1FB4KV7YGL1QB. Please verify role's TrustPolicy (Service: AWSGlue; Status Code: 400; Error Code: InvalidInputException; Request ID: bb1b60a5-3301-40de-81bf-ea78018cffa9)</p>