gezza-b

            "Resource": "arn:aws:s3:::awsconfigconforms-yourname/*",
            "Condition": {
                "StringEquals": {
                    "aws:PrincipalOrgID": "youraccount"
                },
                "ArnLike": {
                    "aws:PrincipalArn": "arn:aws:iam::*:role/aws-service-role/config-conforms.amazonaws.com/AWSServiceRoleForConfigConforms"
                }