Is it possible to create an IAM policy in AWS S3 such that a user or group can access only certain objects in an S3 buckets with a specific tag attached to it and all other objects with no tags or different tags in the bucket are not accessible?
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效，请关闭广告屏蔽插件后再试):
问题:
回答1:
You can use s3:ExistingObjectTag/<tag-key>. Using this condition key, you can limit the permission to only on objects that have a specific tag key and value.
For more info: Specifying Conditions in a Policy - Amazon Simple Storage Service
