diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index ddab7db..5c88508 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -54,7 +54,7 @@ brews:
         enabled: true
     directory: Formula
     homepage: "https://github.com/nanohype/cloudgov"
-    description: "AWS governance CLI — IAM least-privilege, cost anomalies, posture, drift, compliance, and resource hygiene across AWS, plus a Kubernetes RBAC scanner"
+    description: "AWS security & cost CLI - IAM, posture, drift, hygiene, K8s RBAC"
     license: "Apache-2.0"
     test: |
       system "#{bin}/cloudgov", "--version"
diff --git a/README.md b/README.md
index 45b1d31..a74a7a8 100644
--- a/README.md
+++ b/README.md
@@ -150,7 +150,9 @@ Required IAM permissions for a read-only audit role:
         "sqs:ListQueueTags",
         "iam:GetAccountSummary",
         "servicequotas:GetServiceQuota",
-        "servicequotas:ListServiceQuotas"
+        "logs:DescribeLogGroups",
+        "events:ListRules",
+        "events:ListTagsForResource"
       ],
       "Resource": "*"
     }