Policy
A policy represents the full binding (or linking) of a Principal with a Role or set of Permissions and the end resource that is impacted. Policies are required to associate defined Permissions in a Role with the end User, Service Account, or Group who needs the access.