Role

Also written: roles, IAM role

An identity with policies but no password. A principal allowed to assume it gets short-lived credentials, which is how a Lambda function gets permissions.