Add some notes on required IAM policy actions.

Please consider adding some information on IAM policy requirements, and perhaps a sample policy config.  I was pulling my hair out until I saw some discussion in the closed tickets, and realized I was missing some actions in my policy.