looks like it's nearly impossible to use Output<string> values within an

iam.getPolicyDocument

hey?