This should use the config for roles, `@ec2_config[:aws_roles_tag]`