The conditions that must be met for the rule to apply. Conditions can match on principals (IAM ARNs) or request paths.