Política de intervalo S3 para permitir UserAgent “Chef Client”

{
"Version": "2012-10-17",
"Id": "<snip>",
"Statement": [
{
"Sid": "<snip>",
"Effect": "Deny",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::<bucket name>/*",
"Condition": {
"StringNotLike": {
"aws:UserAgent": "*Chef *"
}
}
}
]
}