I need to write a resource based policy for my secret manager so that its secret can be seen or change by a specific role only via the cli.
{ "Vers