AWS：Permission Boundaries具有IAM创建角色权限，但是我无法创建角色

Question

在权限范围内

{
            "Sid": "ChangeCreateOnlyboundary",
            "Effect": "Allow",
            "Action": [
                "iam:CreateUser",
                "iam:DeleteUserPolicy",
                "iam:AttachUserPolicy",
                "iam:DetachUserPolicy",
                "iam:PutUserPermissionsBoundary",
                "iam:CreateRole",
                "iam:DeleteRolePolicy",
                "iam:AttachRolePolicy",
                "iam:DetachRolePolicy",
                "iam:PutRolePermissionsBoundary"
            ],
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "iam:PermissionsBoundary": [
                        "arn:aws:iam::777777:policy/jui_boundary_policy",
                        "arn:aws:iam::aws:policy/JavaUserAccess"
                    ]
                }
            }
        },

但无法创建角色

User: arn:aws:sts:.....:assumed-role/..../.... is not authorized to perform: iam:CreateRole on resource: arn:aws:iam:::role/AWSBatchServiceRole