Because a Policy can contain multiple statements right? 1 policy doesn’t mean 1 aws resource. 1 policy could mean a collection of ACL on a collection of resources?