Blocking account-wide creation of public S3 buckets through CloudFormation | Hacker News Reader