`Resource: aws.getCallerIdentity().then(resp =>...
# general
b
Resource: aws.getCallerIdentity().then(resp => arn:aws:ssm:${region}:${resp.accountId}:parameter/myapp*)