doc: fix anonymous identity note - only needed for write access

S3-Bucket-Policies.md

@@ -28,7 +28,7 @@ Supported permissions: `read` (GetObject), `write` (PutObject, DeleteObject, mul
 
 The command writes a standard bucket policy with `Principal: "*"`. Other (non-anonymous) policy statements are preserved when changing access.
 
-**Note:** Anonymous access also requires an `anonymous` identity in IAM. Create one via the admin UI or:
+**Note:** Read and list access work with the bucket policy alone. Write access additionally requires an `anonymous` identity in IAM — create one via the admin UI or:
 ```bash
 > s3.configure -user=anonymous -apply
 ```