The role authorized by RAM. The value formats as acs:ram::{AccountID}:role/{RoleName}.
acs:ram::{AccountID}:role/{RoleName}