Pick the right policy shape.
IAM policies have Effect, Action, Resource. To allow READ-only
access to one specific S3 bucket:
A) "Effect": "Allow", "Action": "*", "Resource": "*"
B) "Effect": "Allow", "Action": ["s3:GetObject","s3:ListBucket"],
"Resource": ["arn:aws:s3:::my-bucket","arn:aws:s3:::my-bucket/*"]
C) "Effect": "Deny", "Action": "*", "Resource": "*"
D) "Effect": "Allow", "Action": "s3:*", "Resource": "*"Sign in to save your code and track progress across devices.
