There is an error in the "Add the following bucket policy:" in the document at the URL above.
Error:
"Resource":"arn:aws:s3:::<bucket-name>", (2 locations)
Correct:
"Resource":"arn:aws:s3:::<bucket-name>/*",
AWS Documentation: Actions, resources, and condition keys for Amazon S3
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3.html
The resources of the action s3:GetObject and s3:PutObject are objects, not buckets.
