add IAM instance profile support