Look up AWS IAM access levels, resource ARNs, and condition keys.
Filter by service with s3:. View action references: s3:GetObject and sts:AssumeRole.
s3: