Can you document what permissions are required for the AWS user (apart from given them entire admin access)