Document the IAM role support
Document the IAM role support

We have two special keys here, `policies` and `policyArns`, which do not map directly to AWS properties
but rather are translated by the operator into suitable SDK calls.

Collaborne/kubernetes-aws-resource-service,Collaborne/kubernetes-aws-resource-service