API: iam:CreateRole User: arn:aws:iam::accountid:user/jenkins is not authorized to perform iam:CreateRole with an explicit deny

I was working for a client in a secure aws environment. where our account only has the policy boundary to perform certain task. I was…