Add iam role

Add a field to compute image to store an IAM role.  This role can be used to control AWS API access from within the image via a defined policy document.