Add note about required EC2 permissions