fixes to ec2_iam_role