https://devopsauthority.tech/2020/04/11/how-to-secure-aws-s3-resources-part-1/