On a static website, individual webpages include static content. To host a website, your bucket must have public read access. It is intentional that everyone in the world will have read access to this bucket. It is recommended that the bucket policy or access control list (ACL) applied to the S3 bucket to prevent public access to the bucket content.