What is the difference between bucket policies and IAM policies in S3?

Bucket policies are attached directly to an S3 bucket and define permissions for actions that can be performed *on* the bucket and its objects. IAM policies are attached to IAM users, roles, or groups and define permissions for actions that can be performed *across* AWS services, including S3. Bucket policies are bucket-specific, while IAM policies are broader in scope.