Does anyone know what values can be set as the "role" parameter of an iam.RolePolicyAttachment? All my code uses iam.Role objects, which work; the docs all say role name, but I guess I couldn't get that to work some time in the past (hence using the Role object). I'm wondering if a role ARN would work there, but I'm not at my computer to test, right now..