Risk: over-authorization of AWS IoT policy

[P-Verifier]

We are a security research team and we recently discovered that there is an over-authorization security issue with this project's IoT policy.
The affected file is as following:

1. aws-iot-analytics-sample-cfn/template.yaml