How do I assign an IAM role for SFTP access in AWS?

import * as aws from "@pulumi/aws";

// Define the IAM policy for SFTP access
const sftpPolicy = new aws.iam.Policy("sftpPolicy", {
    description: "Policy for SFTP access",
    policy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [
            {
                Effect: "Allow",
                Action: [
                    "s3:ListBucket",
                    "s3:GetObject",
                    "s3:PutObject"
                ],
                Resource: [
                    "arn:aws:s3:::your-sftp-bucket",
                    "arn:aws:s3:::your-sftp-bucket/*"
                ]
            },
            {
                Effect: "Allow",
                Action: [
                    "transfer:ListServers",
                    "transfer:DescribeServer",
                    "transfer:ListUsers",
                    "transfer:DescribeUser",
                    "transfer:CreateUser",
                    "transfer:UpdateUser",
                    "transfer:DeleteUser"
                ],
                Resource: "*"
            }
        ]
    })
});

// Create the IAM role for SFTP access
const sftpRole = new aws.iam.Role("sftpRole", {
    assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({
        Service: "transfer.amazonaws.com",
    }),
    description: "IAM role for SFTP access"
});

// Attach the SFTP policy to the IAM role
const sftpRolePolicyAttachment = new aws.iam.RolePolicyAttachment("sftpRolePolicyAttachment", {
    role: sftpRole.name,
    policyArn: sftpPolicy.arn,
});

// Create IAM users for clients and developers
const clientUser = new aws.iam.User("clientUser", { name: "clientUser" });
const developerUser = new aws.iam.User("developerUser", { name: "developerUser" });

// Create access keys for the IAM users
const clientAccessKey = new aws.iam.AccessKey("clientAccessKey", { user: clientUser.name });
const developerAccessKey = new aws.iam.AccessKey("developerAccessKey", { user: developerUser.name });

// Attach the IAM role to the users
const clientRolePolicyAttachment = new aws.iam.UserPolicyAttachment("clientRolePolicyAttachment", {
    user: clientUser.name,
    policyArn: sftpPolicy.arn,
});

const developerRolePolicyAttachment = new aws.iam.UserPolicyAttachment("developerRolePolicyAttachment", {
    user: developerUser.name,
    policyArn: sftpPolicy.arn,
});

// Export the access key IDs and secret access keys for the users
export const clientAccessKeyId = clientAccessKey.id;
export const clientSecretAccessKey = clientAccessKey.secret;
export const developerAccessKeyId = developerAccessKey.id;
export const developerSecretAccessKey = developerAccessKey.secret;