AWS::IAM::Role AssumeRolePolicyDocument.Version REGEX_MATCH "^202.*$"