Policies deep, managed vs inline, statements, conditions

Move from knowing what a policy is to understanding how policies behave. A managed policy is a reusable object, an inline policy lives and dies with one identity, explicit Deny always wins, and a Condition block fences a grant to facts about the request.