SUMMARY
Why I am getting "not authorised to perform: iam:CreateRole" error after upgrading to v1.1.0
ISSUE
After upgrading to Boomerang v1.1.0 and upwards, you may experience deployment failure and receive an error message like "Failed - User: arn:aws:iam::64090xxxxxxx:user/xxxxx' is not authorized to perform: iam:CreateRole on resource: arn:aws:iam::64090xxxxxxx:role/vmimport-20150803-VSIb".
RESOLUTION
Boomerang uses new AWS functionality for faster recovery since v1.1.0 and it requires access to a new AWS API. To fix the issue, please update your IAM user policy accordingly by either replacing the current policy with the new config or including "iam:*" in allowed actions for all resources.