expected count: 2 
This policy allows any IAM user action starting with "Put"
on the resource.
