feat: add dynamic s3Locations
statements to allow oidc roles access to specified s3 paths
#6567
+56
−0