[oavdeev]

How did you do "no overwrite" bit? By enabling versioning?

[laurencei]

I use `s3:PutObject` with versioning - yes.

Although I've not tested if only having `s3:PutObject` even allows overwriting in the first place? You might not need versioning.

Also - they dont have `list` or `read` access, so they cant even see what files are there to overwrite in the first place. They might be able to guess depending on your code, but adding some random numbers and you'd be pretty safe.

Any AWS IWS experts able to confirm if `s3:PutObject` allows overwrite?

[oavdeev]

It does; unfortunately they don't have a nice way to just disallow overwrites (that's why I was curious how you implemented that)