Add doc on working with EC2 and IAM roles