output "policy" {
  description = "IAM policy"
  value       = aws_iam_policy.s3_bucket_ro
}