Don't create a CodeDeployRole as a substitution of access policies

[dmitry-livchak]

As EC2 instances can only have one role, the role usually describes what the instance is doing e.g. WebServerRole, but the policies describe what it has access to e.g. CredStashPolicy. Let the CloudFormation template define all the access policies for the instances it creates.