All the code using the public-read ACL value for S3 buckets is broken because of a change to the S3 service.

We need to implement a similar fix to: pulumi/templates@ed5e07a

Hi,
I've been trying to port the typescript lambda tutorial (https://pulumi.awsworkshop.io/40_lambda_microservices_ts/20_getting_started_with_pulumi.html) to java and encountered some issues during the process.

There seems to be some permission issues - my thumbnailer lambda was not able to manipulate s3 bucket without explicitly adding the following policy:

            var s3AccessPolicy = new Policy("lambdaS3Access", PolicyArgs.builder()
                    .policy(bucket.arn().applyValue(buketArn -> """
                            {
                              "Version": "2012-10-17",
                              "Statement": [
                                {
                                  "Effect": "Allow",
                                  "Action": "s3:*",
                                  "Resource": ["%s", "%s/*"]
                                }
                              ]
                            }""".formatted(buketArn, buketArn)))
                    .build());

So basically, I needed to grant explicit access to both the bucket and all the elements of the bucket and aws.iam.ManagedPolicy.LambdaFullAccess was not enough to cover this.

Can anyone please check if this particular example actually works as it is?