Hi folks - I'm trying to share an AWS IAM role between two different projects, but cannot figure out the correct syntax for making this work