ABAC

If an object has a metadata tag saying it’s classified, only users allowed to access classified data will be able to access it.

S3 ABAC