fix: attach policies to Role on create

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,8 +1,8 @@
 ack_generate_info:
-  build_date: "2025-05-13T05:08:01Z"
-  build_hash: 55bf57b2806c33a7fcd074be403f26ce3f8e58db
-  go_version: go1.24.2
-  version: v0.46.2
+  build_date: "2025-05-14T20:54:45Z"
+  build_hash: 016d4c53082b4b78942ec154e4bf4bf36c4db11d
+  go_version: go1.24.3
+  version: v0.46.2-2-g016d4c5
 api_directory_checksum: 7e1c19231d3275a1147157f6943a7391953f7001
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6

pkg/resource/role/hooks.go

@@ -31,6 +31,25 @@ import (
 	commonutil "github.com/aws-controllers-k8s/iam-controller/pkg/util"
 )
 
+func (rm *resourceManager) attachPolicies(ctx context.Context, r *resource) (err error) {
+	rlog := ackrtlog.FromContext(ctx)
+	exit := rlog.Trace("rm.attachPolicies")
+	defer func() { exit(err) }()
+	for _, p := range r.ko.Spec.Policies {
+		err := rm.addManagedPolicy(ctx, r, p)
+		if err != nil {
+			return err
+		}
+	}
+	for n, p := range r.ko.Spec.InlinePolicies {
+		err := rm.addInlinePolicy(ctx, r, n, p)
+		if err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
 // putRolePermissionsBoundary calls the IAM API to set a given role
 // permission boundary.
 func (rm *resourceManager) putRolePermissionsBoundary(

templates/hooks/role/sdk_create_post_set_output.go.tpl

@@ -5,4 +5,8 @@
             ko.Spec.AssumeRolePolicyDocument = &doc
         }
     }
+	err = rm.attachPolicies(ctx, &resource{ko})
+	if err != nil {
+		return &resource{ko}, err
+	}
     ackcondition.SetSynced(&resource{ko}, corev1.ConditionFalse, nil, nil)