ArnLike takes an ARN and returns true if it is matched by the pattern.

Canonicalize validates IAM resources are appropriate for the authenticator and converts STS assumed roles into the IAM role resource.

TODO: add strip path functionality Canonicalize after testing it in all mappers - this can be used to support role paths in the configmap.

Supported principals.