Use IAM role and permissions instead of a user/group

[nitrocode]

Found a bug? Maybe our Slack Community can help.

Describe the Bug

Use IAM role and permissions instead of a user/group (if possible)

[brilong]

@nitrocode Any updates on fixing the merge conflict so cloudposse can merge into a future release? Thanks.

[nitrocode]

@brilong That PR is untested and was in a draft mode. I closed the PR for now until we are ready to work on it again. I'm unsure if a role can be used in place of the iam user but if it can, then we'd love to set that up and create a working golang test case for it.

[brilong]

I needed SES with IAM role in my environment, so I pulled your iam-role branch and only made two changes to get it working with no IAM user or group being created and the appropriate role being created.

I updated module cloudposse/iam-role/aws to version 0.16.2 and I passed that module principals = { "my principals" } map in order to get past an error with malformed JSON policy document. That is all that was required to get it working.

[nitrocode]

@brilong thank you. I bumped up the iam role module to 0.16.2 and exposed var.principals. Please test that branch and let me know if it works for you.