// Create a policy with multiple Condition keys resource policy "aws:iam/policy:Policy" { __logicalName = "policy" path = "/" description = "My test policy" policy = toJSON({ "Version" = "2012-10-17", "Statement" = [{ "Effect" = "Allow", "Action" = "lambda:*", "Resource" = "arn:aws:lambda:*:*:function:*", "Condition" = { "StringEquals" = { "aws:RequestTag/Team" = [ "iamuser-admin", "iamuser2-admin" ] }, "ForAllValues:StringEquals" = { "aws:TagKeys" = ["Team"] } } }] }) } output policyName { value = policy.name }