moved pam stack configuration to own recipe