How to programatically add a policy to a resource? - Ash Framework