Enabling graphite IAM role for cloudwatch access