terraform-aws-pipeline-common-role-policy