@thegibson @aurynn It doesn't sound like IAM policy is the thing that's in the S3 API where you set ACL on a specific object