The IAM role to authenticate with. If this is left blank, Vault will use the role in the sts:GetCallerIdentity response.