With it you can Allow or Deny access to AWS Services, when they are attached to users, groups or roles. On their own they do nothing.

See also