Status: IN
`check_bucket_policy` returns `True` (allow) when no policies exist or when no policy matches — opposite of AWS IAM's default-deny.
Source: entries/2026/06/05/s3-object-storage-s3_object_storage.md
JSON