Using assumed role with Hosted Grafana and Cloudwatch

Is it possible to use an assumed role for CloudWatch in hosted grafana? I have a similar setup for Scalyr, and was hoping to move away from using an access key + secret.

I see the option to use ARN in Grafana, but I would need a Principal and external ID to attach it to, so I could add a role that Grafana could assume.