title: How to enforce Tag usage when creating S3 Buckets?
body: <p>I want to prevent users from creating an S3 bucket when there is not Tag with the key 'project'.
  Following policy won't work. It prevents creation in any case</p>
  <pre><code>{
  &quot;Version&quot;: &quot;2012-10-17&quot;,
  &quot;Statement&quot;: [
      {
          &quot;Sid&quot;: &quot;DenyCreationWithoutProjectTag&quot;,
          &quot;Effect&quot;: &quot;Deny&quot;,
          &quot;Action&quot;: &quot;s3:CreateBucket&quot;,
          &quot;Resource&quot;: &quot;*&quot;,
          &quot;Condition&quot;: {
              &quot;StringNotLike&quot;: {
                  &quot;aws:RequestTag/project&quot;: &quot;*&quot;
              }
          }
      }
  ]}
  </code></pre>
  <p><a href="https://stackoverflow.com/questions/62304705/tag-enforcement-for-ec2-aws">Tag Enforcement for EC2 - AWS</a>
  and
  <a href="https://stackoverflow.com/questions/65988136/enforce-tagging-for-aws-resources">Enforce tagging for AWS resources</a></p>
  <p>did not help.</p>