I\'m trying to create an aws_iam_policy_document by adding a few statements but it fails because "arn:aws:iam::${var.account_number}:role/audit_${var.deployment_identif