update aws policy