You control access to S3 buckets and objects with: