Effect of the policy. Available values: allow, deny. Defaults to allow.
allow
deny
List of permissions groups IDs. See documentation for more information.
Describes what operations against which resources are allowed or denied.