Control: S3 bucket policy should prohibit public access

This control is from a mod dependency: