add anonymous access to S3 bucket, and restrict bucket and policy to a specific tier.