Policy Syntax

Learn the details of policy syntax to write your own well-formed policy statements.

The overall syntax of a policy statement is as follows:

Allow <identity_domain_name>/<subject> to <verb> <resource-type> in <location> where <conditions>

If you do not include the <identity_domain_name> before the <subject>, then the policy statement is evaluated as though the subject belongs to the default identity domain.

Spare spaces or line breaks in the statement have no effect.

For limits on the number of policies and statements, see Service Limits.