== Exceptions

* Should not be raised on key policies (when AWS KMS actions are used.)
* Should not be raised on policies not using any resources (if and only if all actions in the policy never require resources.)