anonymous users are never allowed to listBuckets(), we do not need to further validate the policy, we can simply reject if credentials are empty.
anonymous users are never allowed to listBuckets(), we do not need to further validate the policy, we can simply reject if credentials are empty.