Update demo-stack with new grant options

Author: bogdankatishev

cloudformation/demo-stack.yaml

@@ -92,6 +92,10 @@ Resources:
       - KongReaderPassword
     Properties:
       User: kongreader
+      Grant:
+      - 'SELECT'
+      GrantOn: 'root.*'
+      WithGrantOption: false
       WithDatabase: false
       PasswordParameterName: !Sub '/${AWS::StackName}/mysql/kongreader/PGPASSWORD'
       Database: