The IAM role that allows the simulation instance to call the AWS APIs that are specified in its associated policies on your behalf.