Adde more documentation about IAM roles