To configure the strategy on the bucket

{
"Version" : "2008-10-17,"
"Id" : "Policy1428559320591,"
"The Statement:" [
{
"Sid" : "Stmt1428559309270,"
"Effect" : "Allow",
"Principal" : "*",
"Action" : "s3: GetObject,"
"Resource", "arn: aws - cn: s3: : : cnctestbucket/*"
}
]
}

Resource permissions also authorize all people can see,

In the link, the browser why resources have been tip:

You are not authorized to perform this operation

How to configure? Thank you very much!