AWS re:Invent 2024 - Amazon S3 security and access control best practices (STG304)