What are the four elements of an IAM policy statement?
spaceto flip
Effect (Allow or Deny), Action (what API calls), Resource (which AWS resources, by ARN), and Condition (optional restrictions like IP, time, tags). Together they answer: who can do what to which resources under what conditions.
