Hello! I'm excited to share github.com/sqlxpert/aws-rcp-s3-require-intelligent-tiering , a resource control policy (RCP) that enforces the initial storage class for objects uploaded to S3 buckets with a particular bucket tag. (I am a fan of Intelligent Tiering and that's the likely application, but you can change the storage class and the tag.) It uses new AWS features, including S3 attribute-based access control (ABAC), introduced in November, 2025. There's also an optional service control policy (SCP) to prevent non-exempt IAM roles from enrolling and disenrolling buckets. There is a CloudFormation template as well as a native Terraform module. Multiple installations are supported, for different storage classes and tags. I hope it's useful, and I hope I'm earning my keep (unpaid 😆) as a new AWS Community Builder!

Intelligent Tiering is a low-effort win, that's smart. 👏 @paulm