shows we can use IAM to query