{ "Version": "2012-10-17", "Statement": [ { "Sid": "AssumeIntoAnyFIAM", "Effect": "Allow", "Action": "sts:AssumeRole", "Resource": "arn:aws:iam::${account}:role/FIAM-*" } ] }