public forRole(account: string, ...roles: string[]) {
    roles.forEach((role) =>
      this.addPrincipal(
        PrincipalType.aws,
        `arn:${this.defaultPartition}:iam::${account}:role/${role}`,