modified to lookup role ARNs