Policies

JSON policy documents in the AWS-IAM shape — Effect / Action / Resource / Condition / NotAction / NotResource.