roleArn

IAM role the service assumes to invoke the target. Must belong to the calling account.