sample IAM Policy for the S3 bucket