The assume role policy documentation on the README is confusing

[lazarillo]

The README file says that an IAM role should be created with the following assume role policy (assume_role_policy attribute if you are using Terraform):

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "sts:AssumeRole"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}

However, assume role policies can only have the AssumeRole action associated with them, and these actions do not depend upon resources -- it is instead the role that is assumed which will have an associated policy that can impact resources. At least this is how I understand it looking from explanations like this one.

I find this all overly confusing, so I might be wrong. However, I think the README should instead say

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "sts:AssumeRole"
      ],
      "Effect": "Allow",
    }
  ]
}

(Note that the "Resource" is gone.)

Am I correct? Would it be possible for someone who understands this clearly to make the example more elaborate? This is quite confusing to get my head around, and I doubt I am the only one.

Thanks!