调用 CreateRole 操作时发生错误（MalformedPolicyDocument）：已禁止字段资源

Question

我正在尝试使用 boto3 在另一个帐户中创建角色，我在网上找到了一个实施策略文档的示例，这样做给了我错误“调用 CreateRole 操作时发生错误（MalformedPolicyDocument）：禁止字段资源”

这是我的代码和我试图用来创建角色的策略文档

import boto3
import os, json

os.environ['AWS_PROFILE'] = "default"
os.environ['AWS_DEFAULT_REGION'] = "us-west-1"

assume_role_policy = {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:Describe*",
                "iam:ListRoles",
                "sts:AssumeRole"
            ],
            "Resource": "*"
        }
    ]
}

def test ():
    sts_client = boto3.client('sts')

    assumed_role_object=sts_client.assume_role(
    RoleArn="arn:aws:iam::456522242738:role/OrganizationAccountAccessRole",
    RoleSessionName="AssumeRoleSession1")

    credentials=assumed_role_object['Credentials']
    access_key = credentials['AccessKeyId']
    secret_key = credentials['SecretAccessKey']
    session_token = credentials['SessionToken']
    

    client = boto3.client('iam', 
    aws_access_key_id=access_key,
    aws_secret_access_key=secret_key,
    aws_session_token=session_token
    )

    response = client.create_role(
    RoleName='CF-AssumeRole',
    AssumeRolePolicyDocument=json.dumps(assume_role_policy)
    )

    print(response)

test()

什么可能导致我的假定角色策略错误？