weboftrust should identify external accounts/resources that assessed accounts can access

wot only checks the `AssumeRolePolicyDocument` and policy documents of resources. If a user can assume into roles in external accounts, or access resources not controlled by this account, this is not identified. Ex. If a user Alice in Account Prod can assume a role into Account 111111111111, and Account 111111111111 is not being assessed, then this connection will not be identified. If the reverse happens (account 111111111111 can assume a role into Prod, where Prod is being assessed), then this will be identified since that trust would be shown in the `AssumeRolePolicyDocument`.

Similarly, if Alice can access the S3 bucket `s3example`, but that bucket is not in Prod, then this will not be shown.