The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.