add the IAM capabilities to the invocation of the AWS cli tool.