add gdk to user path after install, beter IAM role example

Author: rvanderwerf

README.md

@@ -252,6 +252,55 @@ DDA consists of several key components:
 
 2. **Create edge device policy**:
    - Policy name: `dda-greengrass-policy`
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "greengrass:*"
+            ],
+            "Resource": "*"
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "s3:GetObject",
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "arn:aws:s3:::*/*",
+                "arn:aws:s3:::*"
+            ]
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "logs:CreateLogGroup",
+                "logs:CreateLogStream",
+                "logs:PutLogEvents",
+                "logs:DescribeLogStreams"
+            ],
+            "Resource": "arn:aws:logs:*:*:*"
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "iot:Connect",
+                "iot:Publish",
+                "iot:Subscribe",
+                "iot:Receive",
+                "iot:DescribeThing",
+                "iot:GetThingShadow",
+                "iot:UpdateThingShadow",
+                "iot:DeleteThingShadow"
+            ],
+            "Resource": "*"
+        }
+    ]
+}
+```   
    - Attach S3 permissions for component downloads
 
 3. **Create IAM roles**:

setup-build-server.sh

@@ -55,9 +55,16 @@ python3.9 -m pip install --upgrade pip
 python3.9 -m pip install --force-reinstall requests==2.32.3
 python3.9 -m pip install protobuf
 
+
 # Install AWS CLI v2 and GDK
 python3.9 -m pip install git+https://github.com/aws-greengrass/aws-greengrass-gdk-cli.git
 sudo snap install aws-cli --classic
+# Add ~/.local/bin to PATH for GDK
+if ! grep -q 'export PATH="$HOME/.local/bin:$PATH"' ~/.bashrc; then
+    echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc
+fi
+export PATH="$HOME/.local/bin:$PATH"
+
 # Verify AWS CLI installation
 aws --version