add iam rolee support for s3 input