https://devopsauthority.tech/2020/06/05/how-to-secure-aws-s3-resources-part-2/