enable IAM role use