I have an intermediate solution to get it working with databricks. But I don't think this is a proper solution for the problem at hand

{
            "Sid": "BlockDeltaLog",
            "Effect": "Deny",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::BUCKET"
            ],
            "Condition": {
                "StringLike": {
                    "s3:prefix": [
                        "**_delta_log/**"
                    ]
                }
            }
        }