ansible/test/integration/targets/s3_bucket/templates/policy-updated.json

{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Deny",
      "Principal": "*",
      "Action":["s3:GetObject"],
      "Resource":["arn:aws:s3:::{{bucket_name}}/*"]
    }
  ]
}