forcing iam profile to be required