create IAM role and allow deleting app