cc: s3cmd recipe supports IAM roles