Feed cfn credentials in and use new access policy