add awslogs role