title: AWS IAM and CLI - How to resolve pass role error?
body: <p>I logged into AWS console as DEV-OPS-ENGINEER and created ROLE-1 with aws managed policy attached. I attached this role to ECS tasks.</p>
  <p>Now from my machine I logged into aws cli as DEVELOPER and ran aws ecs update-service command but i am getting below mentioned error:</p>
  <p>&quot;An error occurred (AccessDeniedException) when calling the UpdateService operation: User: arn:aws:sts:::assumed-role/DEVELOPER is not authorized to perform: iam:PassRole on resource: arn:aws:iam:::role/ROLE-1&quot;</p>
  <p>My idea was all logged in user (with different roles) should be able to use ROLE-1.</p>
  <p>Any idea why it is throwing me this error and how can I resolve it ?</p>