- Effect: Allow
  Action: s3:ListBucket
  Resource:
  - arn:aws:s3:::{{codeBucket}}
  - arn:aws:s3:::amazon-reviews-pds
- Effect: Allow
  Action:
  - s3:PutObject
  - s3:GetObject
  Resource:
  - arn:aws:s3:::{{codeBucket}}/*
  - arn:aws:s3:::amazon-reviews-pds/*
- Effect: Allow
  Action:
  - s3:DeleteObject
  Resource:
  - arn:aws:s3:::{{codeBucket}}/*  
- Effect: Allow
  Action:
  - kms:Encrypt
  - kms:Decrypt
  - kms:GenerateDataKey*
  - kms:DescribeKey
  Resource:
  - '*'