SCP to deny IAM access to s3 buckets base on s3 tag

I want to deny IAM access to a few high risk tagged s3 buckets. Can you deny access to specific s3 buckets base on tag value, via SCP?