fix aws policy again