S3-Deny-users-from-modifying-S3-Block-Public-Access-(Account-Level).json

{
    "Version":"2012-10-17",
    "Statement":[
       {
          "Effect":"Deny",
          "Principal":"*",
          "Action":"s3:PutAccountPublicAccessBlock",
          "Resource":"*",
          "Condition":{
             "ArnNotLike":{
                "aws:PrincipalARN":"arn:aws:iam::${Account}:role/[PRIVILEGED_ROLE]"
             }
          }
       }
    ]
 }