docs: list minimal permissions set required for Constellation setup

[msanft]

Proposed change(s)

• List the minimal permissions to be able to execute the constellation iam commands (iam create & iam destroy) for each CSP.

Checklist

• Update docs
• Add labels (e.g., for changelog category)
• Link to Milestone

[netlify]

✅ Deploy Preview for constellation-docs ready!

Name	Link
🔨 Latest commit	b7a5260
🔍 Latest deploy log	https://app.netlify.com/sites/constellation-docs/deploys/642544d7dfd059000827bc32
😎 Deploy Preview	https://deploy-preview-1442--constellation-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site settings.

[katexochen]

@msanft Nice, thanks for the work! Could you please validate that we use that exact permissions in the CI for our e2e testing? That way we'll quickly notice if anything changes (at least if we require more permissions).

[msanft]

We should probably merge this with https://docs.edgeless.systems/constellation/getting-started/install#set-up-cloud-credentials and also extend the docs on which permissions are needed for cluster creation there. (as its already done on AWS)

[msanft]

{"message": "[Vale.Spelling] Did you really mean 'superset'?", "location": {"path": "docs/docs/getting-started/install.md", "range": {"start": {"line": 129, "column": 32}}}, "severity": "ERROR"}

Any way to silence the review-🐶 here?

[Nirusu]

Don't forget to set Microsoft.Attestation above for the required registered providers, too. You maybe can merge the footnotes for this, but not sure how it would look good given that they are in separate paragraphs.

[msanft]

Don't forget to set Microsoft.Attestation above for the required registered providers, too. You maybe can merge the footnotes for this, but not sure how it would look good given that they are in separate paragraphs.

Yeah I will need to look at this in the version built by Docusaurus. Just saved it so that I don't forget about it the next time I come back to this