update IAM PowerUser policy