How to securely manage multiple buckets with separate segments in AWS

DevOps AWS
#1

Hi, how can i manage multiple bucket and safe on security restrictions by separate segemnts on the same aws account?

#2

Put policies on the buckets and lock them down to specific actions by specific iam roles?

#3

You can even set the policies to restrict to specific prefixes on objects within the buckets

#4

If needed for some reason