docs: sync IAM permissions breakdown with copy-paste policy

Author: sangharshcs

www/src/content/docs/docs/iam-credentials.mdx

@@ -269,6 +269,7 @@ There are a couple of different things being bootstrapped and these are the perm
       "s3:CreateBucket",
       "s3:PutBucketVersioning",
       "s3:PutBucketNotification",
+      "s3:PutBucketPolicy",
       "s3:DeleteObject",
       "s3:DeleteObjectVersion",
       "s3:GetObject",
@@ -375,26 +376,26 @@ The SST CLI also makes some AWS SDK calls to your account. Here are the IAM perm
       "ssm:GetParameter",
       "ssm:GetParameters",
       "ssm:GetParametersByPath",
-      "ssm:PutParameter"
+      "ssm:PutParameter",
+      "ssm:AddTagsToResource",
+      "ssm:ListTagsForResource"
     ],
     "Resource": [
       "arn:aws:ssm:us-east-1:112233445566:parameter/sst/*"
     ]
   }
   ```
 
-- And permissions to connect to the IoT endpoint in `sst dev` to run your functions [_Live_](/docs/live).
+- And permissions to connect to the AppSync endpoint in `sst dev` to run your functions [_Live_](/docs/live).
 
   ```json
   {
     "Sid": "LiveLambdaSocketConnection",
     "Effect": "Allow",
     "Action": [
-      "iot:DescribeEndpoint",
-      "iot:Connect",
-      "iot:Subscribe",
-      "iot:Publish",
-      "iot:Receive"
+      "appsync:EventSubscribe",
+      "appsync:EventPublish",
+      "appsync:EventConnect"
     ],
     "Resource": [
       "*"