class AWS::IAM::Policy::Statement

def resource_arn resource

def resource_arn resource
  case resource
  when User then resource.arn
  else super(resource)
  end
end