Details of the resource policy. It must include the identity of the principal and the actions allowed on this resource. This is formatted as a JSON string.