code: def read_only_s3_bucket_policy_statements(buckets, folder="*"):
      
      list_buckets = [s3_arn(b) for b in buckets]
      object_buckets = [s3_objects_arn(b, folder) for b in buckets]
  
      bucket_resources = list_buckets + object_buckets
  
      return [
          Statement(
              Effect=Allow,
              Resource=[s3_arn("*")],
              Action=[s3.ListAllMyBuckets]
          ),
          Statement(
              Effect=Allow,
              Resource=bucket_resources,
              Action=[Action('s3', 'Get*'), Action('s3', 'List*')]
          )
      ]
docs: Read only policy an s3 bucket.