{
    "Sid": "NoAssumingRoles",
    "Effect": "Deny",
    "Action": "sts:AssumeRole",
    "Resource": "*"
}