(eventSource:sts.amazonaws.com eventName:AssumeRoleWithSAML) OR (eventSource:iam.amazonaws.com eventName:UpdateSAMLProvider)