https://interactengineering.io/protecting-against-s3-attack-vectors-with-zero-trust-engineering/