SOA-C02 - Security and Compliance - IAM roles and instance profiles