Sorry for reasking but #aws feels pretty dead. I'm trying to replicate these steps outlined here: https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/aws.md#iam-policy but I get the following error:

time="2020-05-28T13:10:26Z" level=info msg="Assuming role: arn:aws:iam::503405380068:role/k8s-pulumi-instanceRole-role-9e5a01b"
time="2020-05-28T13:12:30Z" level=error msg="AccessDenied: User: arn:aws:sts::503405380068:assumed-role/k8s-pulumi-instanceRole-role-9e5a01b/i-0dcb94de93da90dae is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::503405380068:role/k8s-pulumi-instanceRole-role-9e5a01b\n\tstatus code: 403, request id: 33ba5c26-7b45-4234-a762-b2f1ac4d8a42"

I've put the relevant code here in a gist if you want to check it out: https://gist.github.com/benjick/7c096f5634b34f022adf81469d440d4a Cheers!