support for IAM roles, improved configurability