Declarative access policies/permissions modeled after AWS' IAM policies. - View it on GitHub