}
			policy, _ = c.iamGroupPolicyMap.Load(group)
		}

		policies = append(policies, policy.toSlice()...)
	}

	return policies, mp.UpdatedAt, nil
}

func (c *iamCache) updateUserWithClaims(key string, u UserIdentity) error {
	if u.Credentials.SessionToken != "" {
		jwtClaims, err := extractJWTClaims(u)
		if err != nil {
			return err
		}
		u.Credentials.Claims = jwtClaims.Map()
	}