Get a function's resource-based policy

Returns the resource-based IAM policy for a function, version, or alias.