One doc tagged with "permission-set"

Introduce type='permission_set' for AWS IAM Policies (and analogous policy-holder entities) rather than reusing type='role'