{
  "Statement" : [
    {
      "Effect" : "Deny",
      "Action" : ["Update:Replace", "Update:Delete"],
      "Principal": "*",
      "Resource": "*",
      "Condition" : {
        "StringEquals" : {
          "ResourceType" : ["AWS::S3::Bucket"]
        }
      }
    }
  ]
}