https://aws.amazon.com/blogs/aws/introducing-resource-control-policies-rcps-a-new-authorization-policy/. Use case: https://aws.amazon.com/blogs/security/preventing-unintended-encryption-of-amazon-s3-objects/.
