AWS S3 public read based on object tag

aws-s3-public-by-tag.json

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "Statement1",
            "Principal": {
                "AWS": "*"
            },
			"Effect": "Allow",
			"Action": [
                "s3:GetObject",
                "s3:GetObjectVersion"
			],
			"Resource": [
				"arn:aws:s3:::mysite.jcbagtas.com/*"
			],
			"Condition": {
                "StringEquals": {
                    "s3:ExistingObjectTag/public": "true"
                } 
            }
		}
	]
}