[{"data":1,"prerenderedAt":42},["ShallowReactive",2],{"tag-governance":3,"tag-all":14},[4],{"_path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fabac-object-tags-vs-prefix-policies","Object tags or prefixes: which access model survives growth","Prefixes decide what a principal can list, tags decide what it can read. Two AWS limits break tag-only designs, and prefix policies run out at about 60 tenants.","2026-11-03",[10,11,12,13],"s3","iam","governance","access-control",[15,17,21,24,27,30,35,40],{"tags":16},[10,11,12,13],{"tags":18},[10,11,19,20],"sts","aws",{"tags":22},[10,11,23,13],"security",{"tags":25},[10,23,26],"uploads",{"tags":28},[10,23,29],"presigned-urls",{"tags":31},[10,32,33,34],"tutorial","tooling","seaweedfs",{"tags":36},[10,37,38,39],"pricing","cloud","cost-optimisation",{"tags":41},[10,38],1793734272685]