Add IAM conditionals to s3 bucket policy (aws:SourceARN, aws:SourceAccount, etc)

[aiell0]

Describe the solution you'd like.

I would like to be able to add conditional statements to the S3 bucket policy that prevent the confused deputy problem. I would also like it to work alongside the current policy options (alb logging, s3 logging, encryption, etc).

Describe alternatives you've considered.

There aren't any besides creating the policy at a separate resource and linking the s3 bucket created from the module.

Additional context

None

[github-actions]

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

[github-actions]

This issue was automatically closed because of stale in 10 days