added policy role-based-access-to-s3-bucket