iam: don't update attached policies on creation of a resource if there are no attached policies
iam: don't update attached policies on creation of a resource if there are no attached policies

lucidsoftware/cumulus