explain_role_selection
Dry-run IAM role resolution for one AWS account to show which role would be assumed and why, without making a service call or letting the model choose.
Instructions
Dry-run deterministic role resolution for one account; makes no service call.
Shows exactly which role would be assumed and why - explicit override, TOML environment mapping, or sole granted role - without the model ever choosing a role itself.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| org | No | ||
| role | No | ||
| account_id | Yes | ||
| account_name | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||