varReference:
  - apiVersion: iam.services.k8s.aws/v1alpha1
    kind: Role
    path: spec/assumeRolePolicyDocument
    value: mq-ack-options