Yeah agreed. We should make that explicit, or even give people a CloudFormation template to set up a restricted policy. And to be clear, we don't need s3 acces

Yeah agreed. We should make that explicit, or even give people a CloudFormation template to set up a restricted policy. And to be clear, we don't need s3 access unless you want to serve files from a private s3 bucket. Most sites don't use that at all.