Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and add tags to the associated protected resource.