I ran into the same issue and it turned out that I missed setting up the trust policy for the IAM role. The IAM role for the Unity Catalog needs a specific assume role policy. More details see https://docs.databricks.com/data-governance/unity-catalog...
