Well, it used to be same for Cloudflare R2 , which was just fixed less than two months ago [1]. This was an unexpected showstopper for me.

I honestly find it hard to understand why this kind of basic security feature wasn't in GA.

[1]: https://community.cloudflare.com/t/r2-token-per-bucket/38906...