Allow or deny operations against the resources. Available values: "allow", "deny".
Policy identifier.
A set of permission groups that are specified to the policy.
A list of resource names that the policy applies to.