Amazon Resource Name (ARN) of the IAM role that has the permissions to scan and add tags to the associated protected resource.