in lib/role.ts [304:306]
public grantPassRole(identity: IPrincipal) { return this.grant(identity, 'iam:PassRole'); }