[Feature] Reduce iam user permissions to bare minimum

[d3287t328]

Is this your first time submitting a feature request?

• [X] I have searched the existing issues, and I could not find an existing issue for this feature
• [X] I am requesting a straightforward extension of existing functionality

Describe the feature

The tutorial video proposes making the iam user with full admin permissions. This is unacceptably broad and it should only be the minimal needed to create the repo resources. It should be possible to make this with pulumi.

Describe alternatives you've considered

No response

Who will this benefit?

No response

Are you interested in contributing this feature?

No response

Anything else?

No response