ReadonlyadminRoles granted admin access (writer + Create/Delete/Rename, PutPolicy).
ReadonlynameLogical name of the access policy for identification in policy statements.
ReadonlyreaderRoles granted read-only access (GetTable, GetTableData, List*, etc.).
ReadonlywriterRoles granted read-write access (reader + PutTableData, UpdateTableMetadataLocation).
Resolved access policy with role refs already expanded from logical names. Maps permission levels (reader, writer, admin) to arrays of resolved IAM role references.