You must associate a user group with this policy. Specify the user group whose members can connect to the resources specified ...