Control: S3 buckets should prohibit public read access

This control is from a mod dependency: