create-policy-for-ecs-access-to-s3-efs