yet another s3 policy example

gistfile1.json

{
  "Version": "2008-10-17",
  "Id": "Policy1426504761539",
  "Statement": [
    {
      "Sid": "Stmt1426504756244",
      "Effect": "Deny",
      "Principal": {
        "AWS": "*"
      },
      "Action": "s3:DeleteBucketPolicy",
      "Resource": "arn:aws:s3:::z.a"
    },
    {
      "Sid": "Stmt1426504756244",
      "Effect": "Deny",
      "Principal": {
        "AWS": "*"
      },
      "Action": 
        "s3:DeleteObject",
      "Resource": "arn:aws:s3:::z.a/*"
    }
  ]
}