I was kinda hoping this would just be a simplistic API on top of actual S3 so I get the benefits of both.
Couldn't presigned URLs work like tokens? And can't you do filtering with s3 select?
It's been a while since I did anything complicated, or much at all with s3 so I am not claiming to be any authority. Just curious!