{"id":"iam-groups-identity-based-policies-only","text":"Only identity-based policies can be attached to IAM user groups — resource-based policies cannot reference groups.","truth_value":"IN","source":"entries/2026/03/08/iam-groups.md","source_url":"","source_hash":"d484218a9298ead3","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-groups-identity-based-policies-only","truth_value":"IN","reason":"premise"}]}}