Status: IN
S3 ARN patterns: bucket-level is `arn:aws:s3:::bucket-name`, objects within a bucket use `arn:aws:s3:::bucket-name/*` — both are often needed in policies.
Source: entries/2026/03/08/s3-access-control.md
JSON