However, if I switch to

aws.lambda.Function

(not Callback), it doesn't have

policies

prop.