Update notes for submitted changes

* Add RBAC policy for ec2 API security groups calls