but if you wanted to know the separate queries

does us-east-1 contain app1

and also

does app1 have view permission on doc1

then those would be different checks