JSON policy for read-only access to an S3 bucket

gistfile1.json

{
  "Statement": [
      {
          "Effect": "Allow",
    "Action": ["s3:ListBucket"],
	  "Resource": ["arn:aws:s3:::pyconprod"]
      },
      {
	  "Effect": "Allow",
	  "Action": ["s3:GetObject"],
	  "Resource": ["arn:aws:s3:::pyconprod/*"]
      }
  ]
}