Add support for IAM roles.

Add a boolean attribute "use_iam_profile" that can be used instead
of "aws_access_key_id" and "aws_secret_access_key".