Which IAM role/roles should I assign to an EC2 Instance to create EKS Cluster using eksctl command line tool? As storing AWS CLI credentials in EC2 Instance is not a secure opti