State required IAM permissions in README

Hey, thanks for a great plugin!

Could you put required IAM permissions to README, as it's not clear what's needed. It took us multiple tries to understand that we need `iam:CreateRole` and `iam:PutRolePolicy` for this plugin to work... And I bet that this is not the full list, it just works for our use case.