added a valid IAM policy to set a dedicated user