add a command for testing an IAM role