IAM roles design and minor specification updates