Check CloudWatch permission for CloudWatch service - EUCA-9388

EUCA-9388
Merge remote-tracking branch 'origin/dev/sjones/EUCA-9388' into testing