update bucket policy