b59893ca-8982-4277-abd1-4bcd8527c9dd
policy depends on the accessPointArn so I can't attach it on creation