I would like to set up a policy for AWS CloudMap/Service discovery list-namespaces and list-services to only display namespaces and services inside of the current VPC.