A trust policy determines who or what services are allowed to assume the role. The trust policy can also grant access to identities outside of AWS like social logins, logging in through Lambda authorizers, etc.