Since an EKS Cluster has already been pre-provisioned with all the IAM roles created, all you need to do is attach it!
Select the instance, then choose Actions / Security / Modify IAM role
Choose the role that contains “BastionStack” in it.
Click Save