## Module functionality
Creates an IAM policy that allows readonly access to a bucket