add option iam_instance_profile to aws launch_configuration for role based access control