An IAM role that restricts read and write access of objects to a particular sub-directory in an S3 bucket is called a bucket policy. Specifically, the policy would be written to apply to the particular sub-directory and would specify which IAM users or groups are allowed to access the objects within it. The policy would also define the level of access allowed (e.g. read-only or read/write).
