aws, terraform: support creation of more than a single IAM Role, and add bucket_readonly_access config

aws, terraform: support creation of more than a single IAM Role, and add bucket_readonly_access config #904