> Why is there a tophat over "IAM role”?

Presumably because rather than being a person, the IAM role is a “hat” that a person wears.