There's already S3 IAM stuff happening in aws/iam.tf and there's more in aws/storage.tf. But when I look at the IAM stuff in the AWS console, it says that the storage stuff isn't being used. Try deleting it and running the code and seeing if it works.