This role is created separate from account standards even though it is required in all accounts. The role must be created after the salt master instance or the trust policy can't be applied.

PREREQUISITES:

Order gets very important in this module, unfortunately. The following sequence is required:
* The salt-master instances must be created in C2 test and C2 prod (in govcloud).
* This module must be run in commercial C2 prod (The user is created, which is trusted by all others)
* This module must be run in commercial C2 test (The user is created, which is trusted by the rest of test)
* Then the module can be run in all the other accounts
