Enabling public read access on S3 also enables directory listing, exposing all files. Here's a bucket policy that allows file access while preventing listing. …