Better handle not using IAM role