title: Error while creating EKS Cluster using eksctl
body: <p>I am trying to create a EKS cluster using eksctl using my IAM user. I am using a yaml file to provide all the configuration. While doing so, I am getting error</p>
  
  <p>The content of yaml file is posted below:</p>
  
  <pre><code>apiVersion: eksctl.io/v1alpha5
  kind: ClusterConfig
  
  metadata:
    name: testCluster1
    region: us-east-2
  
  nodeGroups:
    - name: ng-1
      instanceType: m5.large
  
  iam: 
    serviceRoleARN: "arn:aws:sts::019751775207:assumed- 
  </code></pre>
  
  <p>role/XYZ_Team_Access/Nabc.ysh@xyz.com"</p>
  
  <p>Error:
  Cluster/ControlPlane: CREATE_FAILED - "The service name in roleArn must be scoped to 'iam'. (Service: AmazonEKS; Status Code: 400; Error Code: InvalidParameterException; Request ID: 56115c79-8909-11e9-a1da-85124a03f2a7)"</p>
  
  <p>`Console Output:</p>
  
  <pre><code>[?]  using region us-east-2
  [?]  setting availability zones to [us-east-2c us-east-2a us-east- 2b]
  [?]  subnets for us-east-2c - public:192.168.0.0/19 private:192.168.96.0/19
  [?]  subnets for us-east-2a - public:192.168.32.0/19 private:192.168.128.0/19
  [?]  subnets for us-east-2b - public:192.168.64.0/19 private:192.168.160.0/19
  [?]  nodegroup "ng-1" will use "ami-04ea7cb66af82ae4a" [AmazonLinux2/1.12]
  [?]  creating EKS cluster "clusterAmol1" in "us-east-2" region
  [?]  1 nodegroup (ng-1) was included
  [?]  will create a CloudFormation stack for cluster itself and 1 nodegroup stack(s)
  [?]  if you encounter any issues, check CloudFormation console or try 'eksctl utils describe-stacks --region=us-east-2 --name=clusterAmol1'
  [?]  2 sequential tasks: { create cluster control plane "clusterAmol1", create nodegroup "ng-1" }
  [?]  building cluster stack "eksctl-clusterAmol1-cluster"
  [?]  deploying stack "eksctl-clusterAmol1-cluster"
  [?]  unexpected status "ROLLBACK_IN_PROGRESS" while waiting for CloudFormation stack "eksctl-clusterAmol1-cluster"
  [?]  fetching stack events in attempt to troubleshoot the root cause of the failure
  [?]  AWS::CloudFormation::Stack/eksctl-clusterAmol1-cluster: ROLLBACK_IN_PROGRESS - "The following resource(s) failed to create: [RouteTableAssociationPrivateUSEAST2B, RouteTableAssociationPrivateUSEAST2C, RouteTableAssociationPrivateUSEAST2A, RouteTableAssociationPublicUSEAST2A, RouteTableAssociationPublicUSEAST2C, RouteTableAssociationPublicUSEAST2B, ControlPlane, NATGateway]. . Rollback requested by user."
  [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2C: CREATE_FAILED - "Resource creation cancelled"
  [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2C: CREATE_FAILED - "Resource creation cancelled"
  [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2A: CREATE_FAILED - "Resource creation cancelled"
  [?]  AWS::EC2::NatGateway/NATGateway: CREATE_FAILED - "Resource creation cancelled"
  [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2A: CREATE_FAILED - "Resource creation cancelled"
  </code></pre>
  
  <p>[?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2B: CREATE_FAILED - "Resource creation cancelled"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2B: CREATE_FAILED - "Resource creation cancelled"
      [?]  AWS::EKS::Cluster/ControlPlane: CREATE_FAILED - "The service name in roleArn must be scoped to 'iam'. (Service: AmazonEKS; Status Code: 400; Error Code: InvalidParameterException;  Request ID: ae0ef6d8-8917-11e9-b12f-eb52e4e9e6af)"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2B: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2A: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2C: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2C: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2A: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Route/PublicSubnetRoute: CREATE_COMPLETE
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2B: CREATE_IN_PROGRESS
      [?]  AWS::EKS::Cluster/ControlPlane: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2A: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2B: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::NatGateway/NATGateway: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2C: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2C: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2A: CREATE_IN_PROGRESS
      [?]  AWS::EC2::NatGateway/NATGateway: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2B: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2A: CREATE_COMPLETE
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2C: CREATE_COMPLETE
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2B: CREATE_COMPLETE
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2A: CREATE_COMPLETE
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2C: CREATE_COMPLETE
      [?]  AWS::EC2::VPCGatewayAttachment/VPCGatewayAttachment: CREATE_COMPLETE
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2B: CREATE_COMPLETE
      [?]  AWS::EC2::SecurityGroupIngress/IngressInterNodeGroupSG: CREATE_COMPLETE
      [?]  AWS::EC2::SecurityGroupIngress/IngressInterNodeGroupSG: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SecurityGroupIngress/IngressInterNodeGroupSG: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SecurityGroup/ControlPlaneSecurityGroup: CREATE_COMPLETE
      [?]  AWS::EC2::SecurityGroup/ClusterSharedNodeSecurityGroup: CREATE_COMPLETE
      [?]  AWS::EC2::SecurityGroup/ControlPlaneSecurityGroup: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SecurityGroup/ClusterSharedNodeSecurityGroup: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Route/PublicSubnetRoute: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Route/PublicSubnetRoute: CREATE_IN_PROGRESS
      [?]  AWS::EC2::RouteTable/PrivateRouteTable: CREATE_COMPLETE
      [?]  AWS::EC2::RouteTable/PublicRouteTable: CREATE_COMPLETE
      [?]  AWS::EC2::VPCGatewayAttachment/VPCGatewayAttachment: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2C: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::RouteTable/PrivateRouteTable: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2A: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2B: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2A: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::RouteTable/PublicRouteTable: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2C: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::SecurityGroup/ControlPlaneSecurityGroup: CREATE_IN_PROGRESS
      [?]  AWS::EC2::VPCGatewayAttachment/VPCGatewayAttachment: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2C: CREATE_IN_PROGRESS
      [?]  AWS::EC2::RouteTable/PrivateRouteTable: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2B: CREATE_IN_PROGRESS
      [?]  AWS::EC2::SecurityGroup/ClusterSharedNodeSecurityGroup: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2A: CREATE_IN_PROGRESS
      [?]  AWS::EC2::RouteTable/PublicRouteTable: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2B: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::Subnet/SubnetPrivateUSEAST2A: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2C: CREATE_IN_PROGRESS
      [?]  AWS::EC2::Subnet/SubnetPublicUSEAST2B: CREATE_IN_PROGRESS
      [?]  AWS::EC2::VPC/VPC: CREATE_COMPLETE
      [?]  AWS::EC2::EIP/NATIP: CREATE_COMPLETE
      [?]  AWS::EC2::InternetGateway/InternetGateway: CREATE_COMPLETE
      [?]  AWS::EC2::EIP/NATIP: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::InternetGateway/InternetGateway: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::EIP/NATIP: CREATE_IN_PROGRESS
      [?]  AWS::EC2::VPC/VPC: CREATE_IN_PROGRESS - "Resource creation Initiated"
      [?]  AWS::EC2::InternetGateway/InternetGateway: CREATE_IN_PROGRESS
      [?]  AWS::EC2::VPC/VPC: CREATE_IN_PROGRESS
      [?]  AWS::CloudFormation::Stack/eksctl-clusterAmol1-cluster: CREATE_IN_PROGRESS - "User Initiated"
      [?]  building nodegroup stack "eksctl-clusterAmol1-nodegroup-ng-1"
      [?]  2 error(s) occurred and cluster hasn't been created properly, you may wish to check CloudFormation console
      [?]  to cleanup resources, run 'eksctl delete cluster --region=us-east-2 --name=clusterAmol1'
      [?]  waiting for CloudFormation stack "eksctl-clusterAmol1-cluster" to reach "CREATE_COMPLETE" status: ResourceNotReady: failed waiting for successful resource state
      [?]  invalid cluster config: missing CertificateAuthorityData
      [?]  failed to create cluster "clusterAmol1"`</p>