Instance profile mitigations for AWS - Issue 341

[ramo-j]

Implement instance profile mitigations for AWS EC2 instances. This takes two actions:

• Remove the instance profile from an instance, and
• Optionally, add an inline policy to the attached role that denies access to old issued tokens (can be thought of as revoking already issued tokens.)

closes #341

[codecov-commenter]

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@f10086d). Click here to learn what that means. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #348   +/-   ##
=======================================
  Coverage        ?   58.81%           
=======================================
  Files           ?       34           
  Lines           ?     2880           
  Branches        ?        0           
=======================================
  Hits            ?     1694           
  Misses          ?     1186           
  Partials        ?        0           

Flag	Coverage Δ
nosetests	58.81% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update f10086d...1166262. Read the comment docs.