https://blog.educationnest.com/demystifying-identity-based-policy-in-aws-security-policies/