fix: clarify additional IAM permissions with detailed comments #1271

Job	Run time
python / Check Python E2E tests	13s
python / Check Python chatbot	14s
python / Check Python library	47s
typescript / Check Typescript chatbot	32s
typescript / Check Typescript E2E tests	36s
typescript / Check Typescript library	44s
cdk / Check Python-based MCP Doc Server	1m 58s
cdk / Check Python-based Zen Server	33s
cdk / Check Typescript-based Cognito stack	24s
cdk / Check Typescript-based Dictionary Server	1m 45s
cdk / Check Python-based Time Server	2m 3s
cdk / Check Python-based Dad Jokes Server	1m 58s
cdk / Check Typescript-based Weather Alerts Server	1m 39s
cdk / Check Python-based Book Search Server	2m 16s
cdk / Check Typescript-based Cat Facts Server	1m 40s
cdk / Check Typescript-based Dog Facts Server	1m 41s
	19m 3s

Provide feedback