title: S3 bucket policy: allow full access to a bucket and all its objects
body: <p>I would like a bucket policy that allows access to all objects in the bucket, and to do operations on the bucket itself like listing objects.  (Action is <code>s3:*</code>.)</p>
  
  <p>I was able to solve this by using two distinct resource names: one for <code>arn:aws:s3:::examplebucket/*</code> and one for <code>arn:aws:s3:::examplebucket</code>. </p>
  
  <p>Is there a better way to do this - is there a way to specify a resource identifier that refers to the bucket itself and all its contained objects, in one shot? </p>