diff --git a/lib/plugins/aws/provider/awsProvider.js b/lib/plugins/aws/provider/awsProvider.js
index 30824ddf8004..65f2e948da5a 100644
--- a/lib/plugins/aws/provider/awsProvider.js
+++ b/lib/plugins/aws/provider/awsProvider.js
@@ -304,7 +304,11 @@ class AwsProvider {
             ],
           },
           awsIamPolicyResource: {
-            anyOf: [{ const: '*' }, { type: 'array', items: { $ref: '#/definitions/awsArn' } }],
+            anyOf: [
+              { const: '*' },
+              { $ref: '#/definitions/awsArn' },
+              { type: 'array', items: { $ref: '#/definitions/awsArn' } },
+            ],
           },
           // Definition of Statement taken from https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html#policies-grammar-bnf
           awsIamPolicyStatements: {
@@ -473,8 +477,14 @@ class AwsProvider {
                       identitySource: { $ref: '#/definitions/awsCfInstruction' },
                       issuerUrl: { $ref: '#/definitions/awsCfInstruction' },
                       audience: {
-                        type: 'array',
-                        items: { $ref: '#/definitions/awsCfInstruction' },
+                        anyOf: [
+                          { $ref: '#/definitions/awsCfInstruction' },
+                          {
+                            type: 'array',
+                            items: { $ref: '#/definitions/awsCfInstruction' },
+                            additionalItems: false,
+                          },
+                        ],
                       },
                     },
                     required: ['identitySource', 'issuerUrl', 'audience'],