The unspoken WP core rule is that all backend menu item IDs are all lower-case slugs. However, there are plugins that do no follow this "standard". For example WP-Optimize - Clean, Compress, Cache.

This way, there is no way to define an access policy that targets this backend menu resource. So policy like this will not work:

{
    "Statement": [
        {
            "Effect": "deny",
            "Resource": [
                "BackendMenu:menu-WP-Optimize",
                "BackendMenu:wp-optimize"
            ]
        }
    ]
}