I really apologize for a very cursory read on my part, but I'm guessing it is in the same manner that CORS uploads to S3 is handled: http://aws.amazon.com/articles/1434/
There seems to be more details here: http://aws.typepad.com/aws/2013/05/aws-iam-now-supports-amaz...
Again, I didn't have time to read all of this and see if it is done in the same manner as has been possible with S3/CORS for the last year or so.