From f8456c2676bcf4c137a6b000a37fbaafb107083a Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Wed, 25 Mar 2026 22:26:07 -0700
Subject: [PATCH] doc: fix anonymous identity note - only needed for write
 access

---
 S3-Bucket-Policies.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/S3-Bucket-Policies.md b/S3-Bucket-Policies.md
index a645e5d..96b511b 100644
--- a/S3-Bucket-Policies.md
+++ b/S3-Bucket-Policies.md
@@ -28,7 +28,7 @@ Supported permissions: `read` (GetObject), `write` (PutObject, DeleteObject, mul
 
 The command writes a standard bucket policy with `Principal: "*"`. Other (non-anonymous) policy statements are preserved when changing access.
 
-**Note:** Anonymous access also requires an `anonymous` identity in IAM. Create one via the admin UI or:
+**Note:** Read and list access work with the bucket policy alone. Write access additionally requires an `anonymous` identity in IAM — create one via the admin UI or:
 ```bash
 > s3.configure -user=anonymous -apply
 ```