In many places it is possible to reference resources created in Stack. This is not working for "resources" field in IAM policy statement.