Question: what is the difference between instance profile and role?
Answer: An Instance Profile is a container for a single IAM Role. A typical convention is to create an IAM Role and an Instance Profile of the same name for clarity. An EC2 Instance cannot be assigned a Role directly, but it can be assigned an Instance Profile which contains a Role.