The actions to which the rule applies.
OptionalconditionThe condition that must be met for the rule to apply.
OptionalderivedDerived roles to which the rule applies.
The effect of the rule.
OptionalnameA descriptive name for the rule.
OptionaloutputUser-defined output to be produced when evaluating the rule.
OptionalrolesStatic roles to which the rule applies.
A rule for actions that can be performed on a given resource.