CF VPC template with IAM