The ARN of the IAM service role that performs the declared rule. This is assumed through the roleArn for the pipeline.