Is there somewhere that outlines what is done with the uploads or is this all client side?
I am reluctant to just upload an IAM Policy when that could include bucket names, databases, account names, etc. Things that could expose more information than I would like (both security and product related)