Add an assumeRole option to CloudFormation.