add sections

README.md

@@ -3,7 +3,7 @@
 This contains a bunch of submodules used for setting up an AWS account, to the standard configurations we use
 at Census.
 
-## Submodules
+## Submodules :: Infrastructure
 
 ### [terraform-state](terraform-state)
 
@@ -23,9 +23,24 @@ in the bucket names: `inf-logs-{account_id}-{region}`.
 This sets up the S3 bucket used for VPC flow logs.  One is needed per region, and the region and account are included
 in the bucket names: `inf-flowlogs-{account_id}-{region}`. 
 
-### splunk-user
 ### object-logging
 ### cloudtrail
 ### config
 ### gpg-key
 
+## Submodules :: Common
+
+### [iam-saml](iam-saml)
+
+This sets up the IAM SAML Provideer with id-provider.tco.census.gov.  It figures out gov or ew, and imports the
+appropriate metadata accordingy, saving it in `setup/metdata.xml`.  When creating a SAML role, you need to use
+the output `module.name.saml_provider_document`.
+
+### iam-general-policies
+
+This creates the proper settings for the account (password policy, etc).  It also creates a handful of general purpose
+IAM policies.
+
+### iam-cloud-admin
+
+### splunk-user