document necessary iam permissions

[clofresh]

It would be nice to know which particular iam permissions the commands will need before running. Maybe even have a command that could export a minimal policy you can use.

[ProTip]

Further, kops creates IAM policies. It would be great if these roles could be provided into kops while allowing it to pass the role on to the servers.

It is extremely difficult(impossible?) to allow something access to IAM without creating loopholes that would allow it to acquire full access. #226 may largely mitigate this risk in regards to keys going missing.

[chrislovecnm]

Hey all PRs are welcome!!!! Please let us know if you are able to help out documenting this awesome tool!!!

[yissachar]

We have some docs on this now. Further discussion on minimizing the permissions is taking place in #1100.