but it's not liking just pasting that into a

RolePolicy

attached to the lambda function's `Role`: "MalformedPolicyDocument: Policy document should not specify a principal."