Update IAM account permission checks for roles - EUCA-9883

EUCA-9883
Merge remote-tracking branch 'origin/dev/sjones/EUCA-9883' into maint/4.0/testing