@Gargron Nah, it's no problem. I'm testing on straight S3 though, so I'm not sure how your provider will work.

I'm first testing a public ACL, private-set objects, and a bucket policy to restrict a single object.