Least privilege for S3 access

You are a cloud security engineer at a tech company, and your team is enhancing security by reviewing access policies for all user accounts. Your manager has tasked you with granting minimum required access. One of your first assignment separating S3 read and write access. There are many users who should be allowed the read access. However, only a handful are allowed to write or upload files into S3 bucket.