title: AWS IAM policy: Multiple Actions and Multiple Resources
body: <p>It is question on AWS IAM policy, multiple Actions with Multiple Resources (presumably not related). I have parameter 'myparam' encrypted with 'mykey', and I have policy as below separate blocks, one for param and one for key, it works. </p>
  
  <pre><code>{
      {
          "Action": [
              "ssm:GetParameter",
          ],
          "Effect": "Allow",
          "Resource": "MY-ARN:MY-ACC:parameter/myparam"
      },
      {
          "Action": [
              "kms:Decrypt"
          ],
          "Effect": "Allow",
          "Resource": "MY-ARN:MY-ACC::key/mykey"
      }
  }
  </code></pre>
  
  <p>As per documentation, We can combine multiple actions and resources, If I combine the same as below, Does this work? </p>
  
  <pre><code>{
      {
          "Action": [
              "ssm:GetParameter",
              "kms:Decrypt"
          ],
  
          "Resource": [ 
              "MY-ARN:MY-ACC:parameter/myparam"
              "MY-ARN:MY-ACC::key/mykey"
          ],
          "Effect": "Allow"
      }
  
  }
  </code></pre>
  
  <p>How the Actions to Resource mapping happens in this case? I couldn't find any documentation on this <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html" rel="noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html</a>
  If I have associated resources or associed Actiosn then it makes sense, What is your comments on this?</p>