This module create IAM role assignments for a given scope and principal. It can also assign RBAC Admininator role with conditions to assignable roles.