The policy documents don't change that much I think, but there is more than that that goes into evaluating a policy. You've got resource + org policies, all kin

The policy documents don't change that much I think, but there is more than that that goes into evaluating a policy. You've got resource + org policies, all kinds of tags, complex conditionals, per-assumption stuff etc etc. Fascinating problem space.