Use policies to specify who has access to a CodeArtifact resource and which actions they can perform on it.