title: AWS create role - Has prohibited field
body: <p>I am trying out a simple example suggested by AWS documentation to create a role using a policy json file
  <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-service.html" rel="noreferrer">http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-service.html</a>
  And I get the error</p>
  
  <pre><code>A client error (MalformedPolicyDocument) occurred when calling the CreateRole operation: Has prohibited field Resource
  </code></pre>
  
  <p>Here's the command,</p>
  
  <pre><code>&gt;&gt; aws iam create-role --role-name test-service-role --assume-role-policy-document file:///home/ec2-user/policy.json
  A client error (MalformedPolicyDocument) occurred when calling the CreateRole operation: Has prohibited field Resource
  </code></pre>
  
  <p>The policy is the exact same as the one mentioned in the example</p>
  
  <pre><code>&gt;&gt; cat policy.json 
  {
    "Version": "2012-10-17",
    "Statement": {
      "Effect": "Allow",
      "Action": "s3:ListBucket",
      "Resource": "arn:aws:s3:::example_bucket"
    }
  }
  </code></pre>
  
  <p>My version seems to be up to date</p>
  
  <pre><code>&gt;&gt; aws --version
  aws-cli/1.9.9 Python/2.7.10 Linux/4.1.10-17.31.amzn1.x86_64 botocore/1.3.9
  </code></pre>