Using NotResource field to exclude directories from S3 bucket policiesUsage of NotResource field in S3 bucket policies to exclude matching directories from the policy permissions