{"id":"iam-deny-conditions-only-resource-tags","text":"Deny policy conditions only support resource tag functions, not the full set of condition attributes available in allow policies.","truth_value":"IN","source":"entries/2026/03/10/iam-conditions.md","source_url":"","source_hash":"6b9403c5d340b631","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-deny-conditions-only-resource-tags","truth_value":"IN","reason":"premise"}]}}