Service Role ARN blank in CodeDeploy

Question

I am trying to setup the CodeDeploy service with one of my ec2 instances. On the form to do this, everything works properly until I reach the "Service Role" section.

This field does not display any possible ARNs.

This is what I see:

I created an IAM user and gave them Admin privileges and pasted their ARN into this field and got the error message

Cannot assume role provided.

Does anyone know the reason this is happening?

Answer 1

I had to add "codedeploy.amazonaws.com" to the Role Trust Relationships:

    {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": [
          "codedeploy.amazonaws.com",
          "ec2.amazonaws.com"
        ]
      },
      "Action": "sts:AssumeRole"
    }
  ]
}