## Module functionality
Module creates s3 bucket policy associated with given bucket. Version 2 removes functionality for restricting local roles access to read/write/delete operations, since it's almost not used across the board.
- Admin operations will be denied for everyone except admins (admin_users_arns and admin_roles variables).
- Read and upload operations will be explicitly allowed for external read and write roles.
- Read operations will also be available for given IP addresses.