- "description": "When you add a variable to your policy, you can specify a default value for\nthe variable. If a variable is not present, AWS uses the default text that you\nprovide.\n\nTo add a default value to a variable, surround the default value with single\nquotes (`' '`), and separate the variable text and the default value with a\ncomma and space (`, `).\n\nFor example, if a principal is tagged with `team=yellow`, they can access the\n`DOC-EXAMPLE-BUCKET` Amazon S3 bucket with the name `DOC-EXAMPLE-BUCKET-\nyellow`. A policy with this resource might allow team members to access their\nown resources, but not those of other teams. For users without team tags, you\nmight set a default value of `company-wide`. These users can access only the\n`DOC-EXAMPLE-BUCKET-company-wide` bucket where they can view broad\ninformation, such as instructions for joining a team.\n\n \n \n \"Resource\":\"arn:aws:s3:::DOC-EXAMPLE-BUCKET-${aws:PrincipalTag/team, 'company-wide'}\"\n\n**Related terms**\n\n * [IAM policy elements: Variables](./reference_policies_variables.html)"
0 commit comments