Yeah but the application might run locally and need to upload files to an S3 bucket. How would roles work there if we’re just using EC2 instance roles?