execution-role.ipynb failed CI

Link to the notebook:
https://github.com/aws/amazon-sagemaker-examples/blob/master/sagemaker-fundamentals/execution-role/execution-role.ipynb

Error:

---------------------------------------------------------------------------
Exception encountered at "In [3]":
---------------------------------------------------------------------------
ClientError Traceback (most recent call last)
in
----> 1 role_res = create_execution_role()
2 pp.pprint(role_res)

in create_execution_role(role_name)
38 while 'Marker' in role_res:
39 role_res = iam.list_roles(MaxItems=10, Marker=role_res['Marker'])
---> 40 delete_role(role_res, role_name)
41
42 # Trust policy document

in delete_role(role_

[...]

ClientError: An error occurred (AccessDenied) when calling the ListAttachedRolePolicies operation: User: arn:aws:sts::521695447989:assumed-role/ProdBuildSystemStack-ReleaseBuildRoleFB326D49-QK8LUA2UI1IC/SageMaker is not authorized to perform: iam:ListAttachedRolePolicies on resource: role basic-role

Open sagemaker-fundamentals/execution-role/execution-role.ipynb and inspect the create_execution_role and delete_role flow around In [3], especially the ListAttachedRolePolicies call. Compare that cleanup path with the AccessDenied error for the CI role; done means the notebook completes in CI without this permission failure.

Written by the indexing model from the issue text.