Policy

Also written: policies, IAM policy

A JSON document with Effect, Action and Resource that allows or denies actions. Everything is denied unless allowed, and an explicit Deny always wins.