message: docs: add aws permissions section to component docs
diff: @@ -17,6 +17,7 @@ A zero configuration Nextjs 9.0 [serverless component](https://github.com/server
  - [Features](#features)
  - [Getting started](#getting-started)
  - [Custom domain name](#custom-domain-name)
  +- [AWS Permissions](#aws-permissions)
  - [Architecture](#architecture)
  - [Inputs](#inputs)
  - [FAQ](#faq)
  @@ -96,6 +97,21 @@ myNextApplication:
  domain: ["www", "example.com"] # [ sub-domain, domain ]
  ```
  +### AWS Permissions
  +
  +By default the Lambda@Edge functions run using AWSLambdaBasicExecutionRole which only allows uploading logs to CloudWatch. If you need permissions beyond this, like for example access to DynamoDB or any other AWS resource you will need your own custom policy arn:
  +
  +```yml
  +# serverless.yml
  +
  +myNextApplication:
  + component: serverless-next.js
  + inputs:
  + policy: "arn:aws:iam::123456789012:policy/MyCustomPolicy"
  +```
  +
  +Make sure you add CloudWatch log permissions to your custom policy.
  +
  ### Architecture
  ![architecture](./arch_no_grid.png)
  