document the bucket policy call.