Changed to use assumeRule to grant S3 permission