add iam role support for s3 input