Add support for IAM instance profiles

Hi Antonio, this change (by @chapmanb) lets you apply IAM profiles to instances, letting them do things like interact with S3 without having to explicitly specify credentials.