handson: policy (delete: SSMParameteRead keypair)