Step 3: Create IAM Policy in AWS Console