https://blog.heylinux.com/en/2022/11/enhance-aws-s3-data-security-with-bucket-level-policy/