aws accessanalyzer validate-policy --policy-type IDENTITY_POLICY --policy-document file://identity-policy.json