{
    "Role": {
        "Path": "/",
        "RoleName": "CognitoManagementRole",
        "AssumeRolePolicyDocument": {
            "Version": "2012-10-17",
            "Statement": [
                {
                    "Effect": "Allow",
                    "Principal": {
                        "AWS": "arn:aws:iam::XXXXXXXXXXXX:role/CrossplaneServiceRole"
                    },
                    "Action": "sts:AssumeRole"
                }
            ]
        }
    }
}