aws cli command to update bucket policy