Granting a User Permissions to Pass a Role to an AWS Service