// TODO (nywilken) add support for temporary iam instance policy generation
ifc.IamInstanceProfile==""{
msg:=fmt.Errorf(`no iam_instance_profile defined; when using %q a valid instance profile with SSM managed instance permissions is required`,c.SSHInterface)
msg:=fmt.Errorf(`no iam_instance_profile defined; when using %q a valid instance profile with AmazonSSMManagedInstanceCore permissions is required`,c.SSHInterface)