title: Deny delete of an S3 bucket if a specific tag exists
body: <p>I'm trying to building a policy to deny deletion of an S3 Bucket if a specific tag exists.
  My idea is, if an S3 bucket has the tag (for example):</p>
  <p>Key: <strong>prevent_delete</strong>
  Value: <strong>true</strong></p>
  <p>and someone is try to delete the bucket, deny that permission.so far this is the policy i've been testing:</p>
  <pre><code>{
              &quot;Sid&quot;: &quot;VisualEditor3&quot;,
              &quot;Effect&quot;: &quot;Deny&quot;,
              &quot;Action&quot;: &quot;s3:DeleteBucket&quot;,
              &quot;Resource&quot;: &quot;*&quot;,
              &quot;Condition&quot;: {
                  &quot;Null&quot;: {
                      &quot;aws:RequestTag/prevent_delete&quot;: &quot;true&quot;
                  }
              }
          }
  </code></pre>
  <p>but still allow to delete S3 bucket even if exist the tag on the S3 Bucket.
  I wonder if AWS support this action defined by specific tag.
  In that case, could anyone help me how to do it?</p>
  <p>Thank you</p>