AWS states that: The 

AmazonEC2ContainerServiceFullAccess

 managed IAM policy is being deprecated on January 29, 2021 in response to a security finding with the 

iam:passRole