cloudformation: convert auth properties to NewEmbeddedProperty.
fn: remove an unneeded generic type.
iam: rough support for AWS::IAM::Group and ::Policy.
iam: rough support for AWS::IAM::Role.