Worked on the aws/serverless-application-model repository to deliver conditional IAM Roles support for AWS SAM Functions, focusing on optimizing resource usage and deployment flexibility. Leveraged AWS::NoValue within CloudFormation templates to ensure IAM roles are created only when necessary, reducing unnecessary resources and potential costs. Developed new role resolution methods to handle conditional assignments, minimizing the permission surface and improving security. Expanded the unit test suite in Python to cover a wide range of scenarios, ensuring correctness and reliability of the new feature. This work enables more secure and efficient deployments for customers using AWS SAM, Python, and YAML.