S3 Game - Galaxy

 _______             _        _______           _______  _          __   
(  ____ \           ( \      (  ____ \|\     /|(  ____ \( \        /  \  
| (    \/           | (      | (    \/| )   ( || (    \/| (        \/) ) 
| |         _____   | |      | (__    | |   | || (__    | |          | | 
| | ____   (_____)  | |      |  __)   ( (   ) )|  __)   | |          | | 
| | \_  )           | |      | (       \ \_/ / | (      | |          | | 
| (___) |           | (____/\| (____/\  \   /  | (____/\| (____/\  __) (_
(_______)           (_______/(_______/   \_/   (_______/(_______/  \____/

A policy defines who (Principal) can access a bucket and objects (Resources) and what (Actions) can be done.

Hint 2

Bucket policy is:
{
    "Effect": "Allow",
    "Principal": "*",
    "Action": "s3:ListBucket",
    "Resource": "arn:aws:s3:::s3game-galaxy-level1"
},
{
    "Effect": "Allow",
    "Principal": "*",
    "Action": "s3:GetObject",
    "Resource": "arn:aws:s3:::s3game-galaxy-level1/*"
}

The Principal is "*". So no AWS credentials needed to list and get objects.

Just use your browser to list all available objects :)

Note: S3 bucket returns a list of objects in XML format.

Need another hint?