use aws cli for iam related ops
simplify instance deploys