removing cfn policy