Add some notes on required IAM policy actions.