add an IAM role field to a compute image, to allow use of IAM to control access to AWS services within an instance.