IAM classes are now proper extensions of the Resource class

Added some new IAM unit tests to validate that saving and writing IAM classes (InstanceProfile, Policy, Role) yields consistent cloudformation templates. Additionally, test that scenery can correctly identify InstanceProfiles and Roles in a template, and pull them out for modification.

Next pull request will focus more tests on creating Roles, Policies, and Profiles from scratch with examples.