[rossmohax]

Author keeps saying that Roles are identities,but they are exactly opposite. Role is a set of permissions token issued for that role will have. Whether identity can issue token for that role or not is governed separately. Role is not identity , nor service accounts nor principal.

[isbvhodnvemrwvn]

In AWS parlance it is an identity: https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html