I think a better policy would be to disallow bucket names that follow the account regional namespace convention, but don’t match the account id indicated in the name.