Can you create Dynamic Role Policies for the TES when assuming a role?

I am wanting to know if it is possible to create one IAM policy that can be attached to multiple Roles and Role Aliases and/or Can I have one role alias for all my IoT Devices and set dynamic IAM Policies based on the Thingname.

As an example I need to scope permissions for each Greengrass Device for which AWS services they can access - I am uisng S3 as an example here but may be other services as well.

Could I create one Role Alias that all IoT Things/Core Devices can Assume, This role alias points to an IAM role which has a policy associated with it.

I want to be able to create a policy similar to the below (knowing that my example doesn't work): This will allow all devices to access the "devices" bucket but then scope the access to the Key that is prefixed with the ThingName.

I want to be able to do this as I know for my use case the devices will all follow the same pattern but want to isolate access from each other, without having to manage hundreds or thousands of policies.

Is this possible or is there an alternative I should look at?

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Action": [
				"s3:ListBucket",
				"s3:GetObject",
				"s3:PutObject"
			],
			"Resource": [
				"arn:aws:s3:::devices/${iot:Connection.Thing.ThingName}/*",
				"arn:aws:s3:::devices"
			],
			"Effect": "Allow"
		}
	]
}