# IAM Service Policy Rule

## Properties

| Property | Type | Required | Description |
| --- | --- | --- | --- |
| `action` | string | no | Allowed values: `allow`, `deny`. |
| `expression` | string | no |  |
| `resources` | array[string] | no |  |