How to securely manage multiple buckets with separate segments in AWS

DevOps AWS
1

Hi, how can i manage multiple bucket and safe on security restrictions by separate segemnts on the same aws account?

2

Put policies on the buckets and lock them down to specific actions by specific iam roles?

3

You can even set the policies to restrict to specific prefixes on objects within the buckets

4

If needed for some reason