add required IAM permissions
Allow configuration of AWS credentials