* feat: adds `var.kms_key_policy`
* test: adds `assume_role` for all examples