ansible/changelogs/fragments/60059-aws-kms-update-policy.yml