cloudformation response headers policy