Update iam_role.update_role_description to use UpdateRole action

[Martin11175]

SUMMARY

UpdateRoleDescription action is deprecated and should be replaced with UpdateRole action call, but in a way such that existing workflows reliant on the UpdateRoleDescription permission are able to use it if necessary.

ISSUE TYPE

• Bug Report

COMPONENT NAME

iam_role

ANSIBLE VERSION

ansible 2.9.7
  config file = None
  configured module search path = ['/home/mhiggs/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/mhiggs/.local/lib/python3.6/site-packages/ansible
  executable location = /home/mhiggs/.local/bin/ansible
  python version = 3.6.9 (default, Apr 18 2020, 01:56:04) [GCC 8.4.0]

CONFIGURATION

OS / ENVIRONMENT

Windows 10 / WSL Ubuntu 18.04

STEPS TO REPRODUCE

Using an AWS role with iam:UpdateRole permissions on another existing role:

- name: Update a role's description
  iam_role:
    name: existing-role
    description: A new description

EXPECTED RESULTS

No error, role updates successfully.

ACTUAL RESULTS

Module call fails:

\"Unable to update description for role existing-role: An error occurred (AccessDenied) when calling the UpdateRoleDescription operation: User: arn:aws:sts::*:assumed-role/test-iam-role is not authorized to perform: iam:UpdateRoleDescription on resource: role existing-role\""

[ansibullbot]

Files identified in the description:

• plugins/modules/iam_role.py

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

[ansibullbot]

cc @jillr @s-hertel @tremble @wimnat
click here for bot help

[gravesm]

@Martin11175 Thank you for reporting this issue. Would you be willing to submit a PR for this?

[ansibullbot]

cc @markuman
click here for bot help