Adding the final IAM policy from #63 to the readme.