code: func (storage *MessageBodyStorage) BucketArnAllKeys() *gocf.StringExpr {
  	return gocf.Join("",
  		gocf.String("arn:aws:s3:::"),
  		storage.bucketNameExpr,
  		gocf.String("/*"))
  }
docs: // BucketArnAllKeys returns an Arn value that can be used
  // lambdaFn.RoleDefinition.Privileges `Resource` value.  It includes
  // the trailing `/*` wildcard to support item acccess