add necessary IAM roles for AWS Minion