this is what i am using in the IAM policy assigned to the Role that is assigned to the nodes