testing out an auto-update role for aws