Is it possible to restrict operations on Amazon S3 objects based on their Last-Modified date? -

here's i'm trying achieve: want create iam policy s3 doesn't allow user delete in general, allows them rename objects , give them prefix trash/. want allow them delete objects trash/ prefix, if last-modified date sufficiently far in past.

the idea limit damage done if key compromised, while still allowing deletes.

from reading of documentation, don't think possible thought i'd check wisdom of teh internets first.

update:

it should possible achieve close original aim using amazon's new object expiration policies:
http://docs.amazonwebservices.com/amazons3/latest/dev/objectexpiration.html

you're right, doesn't possible restrict actions last-modified date although don't know sure. why don't try this.

1. prevent users deleting objects via iam policy

2. implement whatever psuedo delete like. eg rename files, move bucket etc. (possibly preventing users seeing these files)

3. have automated/scheduled task (eg once day) deletes these files if last-modified condition met.