A company wants to ensure that only department heads can modify sensitive data in an S3 bucket. Which IAM feature should they use to implement this requirement? | AWS Certified Solutions Architect - Associate Quiz - LeetQuiz