add mininum AWS policy needed for upload