fix: Allow for both amazonaws.com.cn and amazonaws.com conditions in PassRole as required for AWS CN

fix: Allow for both amazonaws.com.cn and amazonaws.com conditions in PassRole as required for AWS CN #1967