Role ARN to assume for plugin identity token federation. Requires Vault 1.17+. Available only for Vault Enterprise