add minimum iam policy file