the other thing that i'm kinda scratching my head about is even though i'm specifying

service_role

as a cluster creation arg. along with

skip_default_node_group=True

, those managed policies are still attempting to be attached.. shouldn't the

service_role=<aws.iam.Role obj.>

arg. prevent default role/managed policy attachment in favor of what was provided by

service_role

? Or am I misunderstanding

service_role

entirely?