AWS Certified Developer - Associate (DVA-C02) — PracticeTrial (no sign-up)

One IAM role serves many project teams. Access to resources tagged Project=A should be granted only when the role session is tagged Project=A. Which authorization model is this?