what

• option to attach AWS Managed IAM policies to created role
• option to add conditions to trust policy

why

• we should be able to use aws managed policies (or any other policies) and not create new ones dedicated for this role
• we should be able to add conditions on who can assume this role (mfa enabled, be part of organization, specific session name, etc)

references

• closes #24
• documentation for conditions: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document
• documentation for conditions in trust role policies: https://aws.amazon.com/blogs/security/how-to-use-trust-policies-with-iam-roles/