Add IAM policy instructions