Skip installing MMS if MMSApiKey is not defined

Don't reboot NAT instance at end of cfn-init
Correct NAT IAM role association