{
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::accountid:user/STSAssumeRole"
      },
      "Action": "sts:AssumeRole"
    },