aws cli update stack policy