add policy for s3 as documentation