bootstrap via AWS role