Stack with S3 bucket and policy