Ensure OSS Bucket is Not Allow Delete Action From All Principals

policy = <<POLICY
{"Statement": [
  {
    "Action": [
- "oss:ListObjectVersions", "oss:ListObjects", "oss:ListParts"
+ "oss:ListObjectVersions"
    ],
- "Effect": "Deny"
+ "Effect": "Allow",
    "Principal": [
- "*"
+ "20214760404935xxxx"
    ],
  ]
]}