I have AWSCodePipeline_FullAccess role.

However when making codepipeline this error appears

User: arn:aws:iam::665852216XXX:user/ekkkkkk is not authorized to perform: iam:CreateRole on resource: arn:aws:iam::665852216XXX:role/service-role/cwe-role-ap-northeast-1-stag-my because no identity-based policy allows the iam:CreateRole action

So,I want to reuse the existing role instead of cwe-role-ap-northeast-1-stag-mybut I can’t find the setting for this in creating Pipeline.

I search around and found , this service role is used for
codepipeline:StartPipelineExecution

I can set servicerole PipeLineXXXXX as using existing service-role,however still creating service-role/cwe-fole-XXX is required.