AWS Policies have 27 operators like StringEqual, or ArnLike. You can also add set operators (ForAllValues or ForAnyValue) at the beginning of all of them and IfExists at the end. They way these modifiers interact and and behave isn't well documented; I've noticed even experienced AWS engineers have trouble remembering all the nuance. So I documented every possible combination (159) and created examples of how they behave in Allow and Deny statements.

I hope you find it useful and would appreciate any feedback.