Amazon Exam SOA-C02 Topic 5 Question 13 Discussion

A large company is using AWS Organizations to manage its multi-account AWS environment. According to

company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account.

The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the

permissions and add a bucket policy to the S3 bucket.

Which parameters should be specified to accomplish this in the MOST efficient manner?