Explicitly specify the cmp arn

awacs makes it harder to understand at first glance in a demo?
DateLessThan to have super short tokens