https://blog.clarence.tw/2020/09/26/day-11-use-cdk-deploy-ec2-i-need-to-add-role-policy-and-execute-user-data-for-the-machine/