Add cloud formation script with bucket policy to allow reading from everywhere and writing/deleting only from given ip