S3 bucket from CFN doesn't block public access

[williamczuba]

This is a security issue. Since the bucket is only accessed from within AWS, it should block public access to prevent accidental data leaks.