A condition to be met.
Trusted attributes supplied by the IAM system.
An operator to apply the subject with.
Trusted attributes discharged by the service.
Trusted attributes supplied by any service that owns resources and uses the IAM system for access control.
The objects of the condition.