Amazon Resource Name (ARN) of the IAM role with permissions to scan and add tags to the associated protected resource.