Documented SNS notifications IAM permissions #171