title: Wildcard '*' in Resource for AWS policies
body: <p>I have an AWS KMS Key Policy consisting a statement like this :</p>
  <pre><code>{
            &quot;Sid&quot;: &quot;Enable IAM User Permissions&quot;,
            &quot;Effect&quot;: &quot;Allow&quot;,
            &quot;Principal&quot;: {&quot;AWS&quot;: &quot;arn:aws:iam::111122223333:root&quot;},
            &quot;Action&quot;: &quot;kms:*&quot;,
            &quot;Resource&quot;: &quot;*&quot;
  }
  </code></pre>
  <p>I can understand that the given root IAM user for the specified account number can perform all the kms: operations. What does * mean for the Resource ? Should it be the arn of the key ?
  In general, what does &quot;Resource&quot;: &quot;*&quot; mean in any Resource policy ?</p>