Read-Only Public S3 Bucket

This template creates a new bucket called `my-bucket` and then disables Block Public Access settings. A public bucket policy is then added to the bucket.