Thank you @Vivian Wilfred
You are so correct,
So regarding the console adding error, i added this iampass with my new role and i am able to add new instance profile via workspace console.
Regarding the TF ,I added the workspace provider and it is also works now. this is great.
I have one last question, I couldnt find the main iam policy attached to the cross account role on the databricks TF module ( same policy i added the iam pass with my new role. so i had to add those config manually. can you maybe tell me if i can control this policy via the TF?
And its called by the TF as: aws_iam_role_policy.this
but couldnt find it
Thanks!