Note

Introduces optional filtering of AWS-managed IAM roles during enumeration.

• Adds --exclude-default-roles flag to iam enumerate and threads ExcludeDefaultRoles through IamEnumerateConfig
• Updates API schema (fern/definition/iam/enumerate.yml) and bumps Fern config version
• Extends role enumeration to accept the flag and filter out default roles via isDefaultAwsRole (service-linked, Identity Center, Control Tower) with supporting helpers and regex
• Adjusts logging and report wiring to reflect filtered role counts

^{Written by Cursor Bugbot for commit 8f6708b. This will update automatically on new commits. Configure here.}