CF file for iam role