json schema for AWS IAM Policy Document