Add ability to specify IAM instance profile
We would like to assign an IAM role to the new instances to let them have access to various resources (like pulling of images from ECR). This adds variable support to allow the profile to be defined, but falls back to empty (which was the default beforehand).