Data only module that breaks down s3 iam permissions into 6 groups as locals in main.tf
----------+----------------+---------------+
| create/update | read | delete |
----------+----------------+------+--------+
in-bucket | | | |
----------+----------------+------+--------+
(on)bucket| | | |
----------+----------------+------+--------+
Currently there is no distinction beteween create and update, if you can
create it you can change it's attr's as well.
For outputs there are just 4 major combinations
------------+--------------------+-------------------+
output name | destructive_ | non_destructive_ |
------------+--------------------+-------------------+
in-bucket | can read | can read | read_
| can create/update | can create/update | write_
| can delete | can't delete |
------------+--------------------+-------------------+
(on)bucket | see above | see above |
------------+--------------------+-------------------+