In AWS IAM, there are two types of roles. The IAM user will have a permanent identity. The federated user will not have an identity.