public void setRoleARN(String roleARN) {
        this.roleARN = roleARN;
    }
<p>
The ARN of the IAM role that you want the delivery stream to use to create endpoints in the destination VPC. You
can use your existing Firehose delivery role or you can specify a new role. In either case, make sure that the
role trusts the Firehose service principal and that it grants the following permissions:
</p>
<ul>
<li>
<p>
<code>ec2:DescribeVpcs</code>
</p>
</li>
<li>
<p>
<code>ec2:DescribeVpcAttribute</code>
</p>
</li>
<li>
<p>
<code>ec2:DescribeSubnets</code>
</p>
</li>
<li>
<p>
<code>ec2:DescribeSecurityGroups</code>
</p>
</li>
<li>
<p>
<code>ec2:DescribeNetworkInterfaces</code>
</p>
</li>
<li>
<p>
<code>ec2:CreateNetworkInterface</code>
</p>
</li>
<li>
<p>
<code>ec2:CreateNetworkInterfacePermission</code>
</p>
</li>
<li>
<p>
<code>ec2:DeleteNetworkInterface</code>
</p>
</li>
</ul>
<important>
<p>
When you specify subnets for delivering data to the destination in a private VPC, make sure you have enough
number of free IP addresses in chosen subnets. If there is no available free IP address in a specified subnet,
Firehose cannot create or add ENIs for the data delivery in the private VPC, and the delivery will be degraded or
fail.
</p>
</important>

@param roleARN
       The ARN of the IAM role that you want the delivery stream to use to create endpoints in the destination
       VPC. You can use your existing Firehose delivery role or you can specify a new role. In either case, make
       sure that the role trusts the Firehose service principal and that it grants the following permissions:</p>
       <ul>
       <li>
       <p>
       <code>ec2:DescribeVpcs</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:DescribeVpcAttribute</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:DescribeSubnets</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:DescribeSecurityGroups</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:DescribeNetworkInterfaces</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:CreateNetworkInterface</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:CreateNetworkInterfacePermission</code>
       </p>
       </li>
       <li>
       <p>
       <code>ec2:DeleteNetworkInterface</code>
       </p>
       </li>
       </ul>
       <important>
       <p>
       When you specify subnets for delivering data to the destination in a private VPC, make sure you have
       enough number of free IP addresses in chosen subnets. If there is no available free IP address in a
       specified subnet, Firehose cannot create or add ENIs for the data delivery in the private VPC, and the
       delivery will be degraded or fail.
       </p>
aws-java-sdk-kinesis/src/main/java/com/amazonaws/services/kinesisfirehose/model/VpcConfiguration.java