To manage and control access to your resources, you can define customized policies and assign them at a scope.