update README with IAM policy