CanAssumeRole checks if a service can assume a role.

CheckPolicyDocument checks a PolicyDocument to make sure it will not result in failures.

GetCallerArn gets the role arn of the caller based on the aws config.

PrincipalExists checks to see if the principal exists in the account.

RoleExists checks to see if a role exists in the account.

Simulate actions on a resource.