usage: /usr/bin/rgw-policy-test [options...] ACTION POLICY
options:
  -t | --tenant=TENANT	tenant owning the resource the policy governs
  -e | --environment=KEY=VALUE	Pair to set in the environment
  -I | --identity=IDENTITY	Identity against which to test
  -R | --resource=ARN	Resource to test access to

  ACTION	Action to test against, e.g. s3:GetObject
  POLICY	Filename of the policy or - for standard input