one of my roles managed by pulumi is missing a policy, the other roles created by the same code are all fine.