We need to document the IAM permissions needed to 1) run the `make deploy` command and 2) use the executor