icy-controller-6092
new aws.iam.Policy('mypolicy', { ..., policy: JSON.stringify({ ... Resource: other.resource.arn ... }) })