Initial implementation of using assume-role ARNs as configuration variables for cross-account access instead of account-specific keys