{
  "Sid": "AllowFalcoNonProductionRolesFrom3855",
  "Effect": "Allow",
  "Principal": "*",
  "Action": "s3:PutObject",
  "Resource": [
    "arn:aws:s3:::tidbcloud-falco-security-logs/falco/dev/*",
    "arn:aws:s3:::tidbcloud-falco-security-logs/falco/staging/*"
  ],
  "Condition": {
    "ArnLike": {
      "aws:PrincipalArn": [
        "arn:aws:iam::385595570414:role/falco-dev-*-sidekick-s3-write",
        "arn:aws:iam::385595570414:role/falco-staging-*-sidekick-s3-write"
      ]
    }
  }
}
