If I set

cloud-aws:computeIAMRolePolicyARNs

does my list override the defaults or merge with the defaults?

I believe that it overrides the defaults... let me check to be certain.

Do I need to provide the defaults in addition to my policies?

Yes. The defaults are

AWSLambdaFullAccess

and

AmazonEC2ContainerServiceFullAccess

.