README: some fixes in the IAM roles section