Just wanted to let everyone know about a quick update to the CloudWatch integration.
Several users have had troubles knowing the correct permissions needed on their IAM credentials, and it is totally our fault because the integration is very opaque about what it is doing.
Previously, if there was an error, it would just silently fail and no metrics would be imported. Now, if there's any kind of permissions error, we'll show a message on the credentials form about what needs to be done to resolve the issue. After you fix the permissions, "save" the form (even if none of the values changed), and the importer will try again.