referenceRoleArn
ARN of the IAM role that the service can assume to read data on your behalf. This role must have permission for the s3:GetObject
action on the object and trust policy that allows Amazon Kinesis Analytics service principal to assume this role.