You create a role in a way similar to how you create a user—name the role and attach a policy to it. For details, see Creating IAM Roles.