supporting IAM roles, thanks to alexism.