This message was deleted.

I would write the Pulumi code that describes the current unchanged role and policy, import them, then change the code and

pulumi up

.