Trust policy

Also written: assume-role-policy-document

The part of a role that says who may assume it, such as "the Lambda service". Without it Lambda can't use the role at all.