curl -X POST "https://api.spo1.mycloud.com/v1/iam/policies" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "S3BucketAccess",
    "description": "string",
    "document": {
      "version": "2024-01-01",
      "statements": [
        {
          "sid": "AllowS3Read",
          "effect": "allow",
          "actions": [
            "s3:GetObject",
            "s3:ListBucket"
          ],
          "resources": [
            "my-bucket/*",
            "my-bucket"
          ],
          "conditions": [
            {
              "operator": "equals",
              "key": "s3:prefix",
              "values": [
                "home/",
                "shared/"
              ]
            }
          ]
        }
      ]
    }
  }'