A collection of authorization information.
The type of action for which the principal is being authorized.
The resources for which the principal is being authorized to perform the specified action.