add IAM role support to aws checks