IAM Policy to explicitly deny Braket Tasks which are Untagged or have large (>1000) shots.

create_task.py

from braket.circuits import Circuit
from braket.aws import AwsDevice

my_bucket = "amazon-braket-Your-Bucket-Name" 
my_prefix = "Your-Folder-Name"

s3_folder = (my_bucket, my_prefix)
device = AwsDevice("arn:aws:braket:::device/quantum-simulator/amazon/sv1")
bell = Circuit().h(0).cnot(0, 1)  

# specify the number of shots 
shots = 1000

task_result = device.run(
    bell, 
    s3_folder, 
    shots=shots, # do not hardcode here
    tags = {'shots': str(shots)} # specify the number of shots in the tag
).result()

task_result.measurement_counts

DenyBraketUntaggedOrLargeShotTasks

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DenyUntaggedTasksAndJobs",
            "Effect": "Deny",
            "Action": [
                "braket:CreateQuantumTask"
            ],
            "Resource": "*",
            "Condition": {
                "Null": {
                    "aws:RequestTag/shots": "true"
                }
            }
        },
        {
            "Sid": "DenyTasksAndJobsWithLargeShots",
            "Effect": "Deny",
            "Action": [
                "braket:CreateQuantumTask"
            ],
            "Resource": "*",
            "Condition": {
                "NumericGreaterThan": {
                    "aws:RequestTag/shots": "1000"
                }
            }
        }
    ]
}