I've been trying to setup the aws lb controller using this template, and i'm struggling with the module creating a role. We can't do this in our organization, so, we'd need to disable that and pass in the service account. Can you provide an example for how to do that?