Explain how you would secure an S3 bucket that needs to be accessed by a specific Lambda function but blocked from the public internet.
