NotAuthorizedException trying to call cognito.set_identity_pool_roles()

Not sure this is the right place to ask, but I’m also not sure WHERE to ask this. I’m now getting:

botocore.exceptions.ClientError: An error occurred (NotAuthorizedException) when calling the SetIdentityPoolRoles operation: Access to Role ‘SomeRoleName’ is forbidden.

I created the role just a few lines previous in the python script using

 iam = session.client('iam');
 iam.create_role(..)

and now trying to call

cognito = session.client('cognito-identity', region_name='us-east-1')
cognito.set_identity_pool_roles(..)

Am I doing something wrong? Seems the same credentials that created the role should be able to reference it.

Any ideas?

[jvilhuber]

Yes, that was it. The documentation could be better 😉

[jvilhuber]

One thought: I’m passing in the roles via RoleName, instead of an ARN. Perhaps the API wants an ARN?