github.com/minio/console@v1.4.1/web-app/tests/policies/bucketCannotTag.json (about)

     1  {
     2    "Version": "2012-10-17",
     3    "Statement": [
     4      {
     5        "Effect": "Allow",
     6        "Action": ["s3:*"],
     7        "Resource": ["arn:aws:s3:::*"]
     8      },
     9      {
    10        "Action": ["s3:PutObjectTagging", "s3:DeleteObjectTagging"],
    11        "Effect": "Deny",
    12        "Sid": "Deny_Tagging_Actions",
    13        "Resource": ["arn:aws:s3:::*"]
    14      }
    15    ]
    16  }