more on IAM and CLI