adding IAM role support via use_iam_role option