With Object IAM, you can now set access control policies at an object level and specify which operations are allowed by each user or application.  See IAM Policy for Objects for more information.