title: AWS IAM Policy to allow user to create IAM Roles (from Management Console & AWS CLI)
body: <p>I've searched quite a bit but cannot find a policy to allow a user to create IAM Roles from both the management console (AWS website), and from AWS CLI.</p>
  
  <p>Any help is greatly appreciated</p>
  
  <p>EDIT: More clarification, the end-goal is to allow the user to create an Instance IAM Role.</p>