{
   "Version": "2012-10-17",
   "Statement": [
     {
       "Effect": "Allow",
       "Principal": {
         "AWS": [
           "arn:aws:iam::{The user account ID}:user/{DAS IAM User username}"
         ]
       },
       "Action": "sts:AssumeRole"
     }
   ]
 }