Remove IAM default permissions - EUCA-9676

EUCA-9676
Merge remote-tracking branch 'origin/dev/sjones/EUCA-9676' into testing