[added] List of IAM permissions that are required