S3-Deny-ACL-disablement-for-all-new-buckets-(bucket-owner-enforced).json

{
    "Version":"2012-10-17",
    "Statement":[
       {
          "Effect":"Deny",
          "Principal":"*",
          "Action":"s3:CreateBucket",
          "Resource":"*",
          "Condition":{
             "StringNotEquals":{
                "s3:x-amz-object-ownership":"BucketOwnerEnforced"
             }
          }
       }
    ]
 }