title: Amazon AWS S3 IAM Policy based on namespace or tag
body: <p>I have a number of buckets that start with the same namespace as in <code>assets-&lt;something&gt;</code>, so I was wondering what would be the best option to give rights to IAM group with minimal need to maintain it.</p>
  
  <p>Is it possible to use any sort of regex in ARN? Or maybe I could use tags? EC2 has condition for <code>ResourceTag</code>, but it appears that it does not exist for S3.</p>
  
  <p>Or should I with each bucket add new ARN to the policy?</p>
  
  <p>Again I am searching for the minimal solution so attaching new policy to each bucket itself seems to be a bit much.</p>