Permission statement (Statement) is the smallest unit of describing permissions in IAM policy, and it is also the basic unit of permission determination. Different permission declarations in different policies and different permission declarations in the same policy have the same priority effect. A policy contains at least one permission declaration, a single declaration is contained in braces {}, all declarations are contained in the Statement element using the array symbol [], and the outermost declaration is contained in braces {}, representing a complete policy. The entire policy content conforms to the JSON format, and the structure is as follows:

{ 
  "Statement": [ 
    { 
    	... 
    }, 
    { 
    	... 
    }, 
    { 
    	... 
    }, 
    ... 
  ] 
}

The following is a policy that includes two permission declarations:

{ 
  "Statement": [ 
    { 
      "Effect": "Allow", 
      "Action": [ 
        "vpc:TagResources" 
      ], 
      "Resource": [ 
        "*" 
      ] 
    }, 
    { 
      "Effect": "Allow", 
      "Action": [ 
        "iam:TagResources" 
      ], 
      "Resource": [ 
        "*" 
      ] 
    } 
  ] 
}