Defines the permission model for a service.
The list of cross-account IAM role ARNs.
IAM role name (supports up to 64 characters per IAM limits).