Restrict access on an S3 bucket to a set of operations

gistfile1.json

{
   "Version":"2012-10-17",
   "Statement":[
      {
         "Effect":"Allow",
         "Action":[
            "s3:ListBucket",
            "s3:GetBucketAcl",
            "s3:PutBucketAcl"
         ],
         "Resource":[
            "arn:aws:s3:::org.example.foobucket"
         ]
      },
      {
         "Action":[
            "s3:*"
         ],
         "Sid":"Stmt1374283667000",
         "Resource":[
            "arn:aws:s3:::org.example.foobucket/*"
         ],
         "Effect":"Allow"
      }
   ]
}