This role ARN has permission to publish MQTT messages, after which Device Defender Detect can assume the role and publish messages on your behalf.