Policy-as-Code (PaC) is a way to define a set of boundaries in which different roles may work. These boundaries might be expressed as allowlists (only permitting specific attributes/values), blocklists (permitting everything but a specific set of values/attributes), or any combination thereof.