title: AWS IAM policy to limit access to CodeCommit branches with wildcards in their names
body: <p>Amazon now support being able to limit access to CodeCommit repository on a branch by branch basis by means of IAM policies.<br>
  I have successfully denied access to specific branches using a form of the policy below, but cannot find a way to deny access to all branches beginning with a certain name. 
  Ie: master and develop are specific branches but then I have release-1, release-2 etc which I also want to deny. 
  What I want is to be able to use a wildcard. I've tried release-* but that didn't work.
  Is their a format to include wildcards in the  "codecommit:References"?</p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Effect": "Deny",
              "Action": [
                  "codecommit:GitPush",
                  "codecommit:DeleteBranch",
                  "codecommit:PutFile",
                  "codecommit:MergePullRequestByFastForward"
              ],
              "Resource": "arn:aws:codecommit:us-east-2:80398EXAMPLE:MyDemoRepo",
              "Condition": {
                  "StringEqualsIfExists": {
                      "codecommit:References": [
                          "refs/heads/master",
                          "refs/heads/develop",
                          "refs/heads/release-[now what]"
                      ]
                  },
              "Null": {
                  "codecommit:References": false
                  }
              }
          }
      ]
  }
  </code></pre>