> You have to read huge manuals to know how to "only give access to s3" through a key

I have to disagree with this. It really is pretty straight forward.[0]

[0] - https://objectivefs.com/howto/how-to-restrict-s3-bucket-poli...