如何设置特定组访问的S3存储桶的权限？

Question

这就是我所拥有的：

{
  "Statement": [
    {
      "Sid": "Stmt1381504474400",
      "Action": [
        "s3:CreateBucket",
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::awesome-bucket/*"
    }
  ]
}

它说它错过了“主要”元素...... 我怎样才能添加一个组？什么是语法???