ARN for an IAM role within this AWS account. The DCE master account will assume this IAM role to execute operations within this AWS account. This IAM role is configured by the client, and must be configured with a Trust Relationship with the DCE master account.
metadataobject
Arbitrary metadata to attach to the account object.