remove defaults from aws policy