README: added IAM roles link