Describe necessary AWS permissions