Amazon S3 access point error in policy

I’m trying to create a policy in the amazon s3 access point to deny everything except if the object tag is odd, but I get an error
so far it looks like this

{
“Version”: “2012-10-17”,
“Statement”: [
{
“Sid”: “Statement1”,
“Effect”: “Deny”,
“Principal”: {
“AWS”: “arn:aws:iam::326271689035:instance-profile/acessa-s3”
},
“Action”: “s3:“,
“Resource”: “arn:aws:s3:us-east-1:326271689035:accesspoint/pontodeacessolab/“,
“Condition”: {
“StringEquals”: {
“s3:ExistingObjectTag/conjunto”: “impar”
}
}
}
]
}

I tried using Amazon Q but was unsuccessful