S3 No Deletes Policy

s3-no-deletes.json

{
  "Id": "PreventPermanentDeletion",
  "Version": "2012-10-17",
  "Statement": [
  {
      "Action": [
        "s3:*"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::bucketname",
        "arn:aws:s3:::bucketname/*"
      ],
      "Principal": {
        "AWS": [
          "arn:aws:iam::001112223333:user/deleter"
        ]
 }
   },
   {
      "Action": [
        "s3:DeleteBucket",
        "s3:DeleteBucketPolicy",
        "s3:DeleteObjectVersion",
        "s3:PutBucketPolicy",
        "s3:PutBucketVersioning",
        "s3:PutLifecycleConfiguration",
        "s3:PutBucketAcl"
      ],
      "Effect": "Deny",
      "Resource": [
        "arn:aws:s3:::bucketname",
        "arn:aws:s3:::bucketname/*"
      ],
      "NotPrincipal": {
        "AWS": [
          "arn:aws:iam::001112223333:user/deleter"
        ]
      }
    }
  ]
}