title: Using IAM roles on the AWS CodeBuild worker
body: <p>Is there a way to grant IAM instance roles to be used by the build process?</p>
  
  <p>In my particular case I need to perform some s3 operations during build (unrelated to archiving artifacts).</p>
  
  <p>So far the only alternative I found is to add an aws key and secret to the environment variables on the aws codebuild configuration page.</p>
  
  <p>It would be more secure to just attach an IAM role to the ec2 instance or container executing the build.  Is that currently (2016-12) possible?</p>