use role name specified in ice.billing_accessRoleName instead of instance's current role name as the assumed role name. get rid of usage of ice.role.