* describe how to assume an iam role within aws organizations [BCD-194] * add notes about roles creation