fix(iam): managed-policy can again be granted actions on resources

fix(iam): managed-policy can again be granted actions on resources #3751