fixed up iam policy doc.
changes to jobs to get the pipeline working. passing cfn id around, etc.