title: What action does iam:PassRole api perform?
body: <p>In the below rule:</p>
  
  <pre><code>{
      "Condition": {
          "StringLikeIfExists": {
              "iam:PassedToService": "lambda.amazonaws.com"
          }
      },
      "Action": [
          "iam:PassRole"
      ],
      "Resource": [
          "arn:aws:iam::${AWS::AccountId}:role/some-role*"
      ],
      "Effect": "Allow"
  }
  </code></pre>
  
  <hr>
  
  <p>We are using this rule for cloud formation stack creation of SAM template(<code>sam deploy</code>). SAM template has lambda and custom roles for lambda.</p>
  
  <p>What exactly are we saying with the above rule?</p>