Self-Hosted IAM: Roles, Policies, and Instance Profiles Without AWS

Full AWS IAM on hardware you own: users, roles, trust policies, instance profiles, and short-lived IMDS credential delivery. No static keys, no AWS account.