Add configuration variable for assume-role ARN