added a note about a dedicated IAM user