Any number of action block as defined below. One of resource_type or action must be specified.
action
resource_type