updated ec2 key questions to mention IAM instead of a url