amazon-s3 - 有没有办法在 S3 存储桶策略中包含组织 ID

Question

我有一个存储桶策略。片段如下。我想使用组织 ID 而不是放置组织的所有帐户 ID。那可能吗？

"Sid": "Stmt458754545842",
            "Effect": "Allow",
            "Principal": {
                "Service": "ssm.amazonaws.com"
            },
            "Action": "s3:PutObject",
            "Resource": [
                "arn:aws:s3:::cgna.inventory.resource.data.sync/*/accountid=123456789120/*",
                "arn:aws:s3:::cgna.inventory.resource.data.sync/*/accountid=123145789415/*"

标签： amazon-s3amazon-iam