update requisite IAM policy