avoid hack

test/s3/iam/iam_config.json

@@ -234,6 +234,17 @@
               "arn:seaweed:s3:::*/*"
             ]
           },
+          {
+            "Effect": "Deny",
+            "Action": [
+              "s3:GetObject",
+              "s3:ListBucket"
+            ],
+            "Resource": [
+              "arn:seaweed:s3:::*",
+              "arn:seaweed:s3:::*/*"
+            ]
+          },
           {
             "Effect": "Allow",
             "Action": ["sts:ValidateSession"],