fix the aminator iam policy for s3 uploads