in scripts/confirm_log_buckets_nodelete.py [0:0]
def validate_acceptable_allow_string(action):
return action != 's3:*' and \
not (action[-1] == '*' and (action[:-1] in 's3:DeleteObject' or action[:-1] not in 's3:DeleteBucket')) and \
(action != 's3:DeleteObject' and action != 's3:DeleteBucket')