Set default policy to public-read