Week 2 – Day 3 Project: IAM Role, Instance Profile, STS temporary credentials, S3 read/upload/download, and least privilege.