The sponsor could use this to enable a one-time migration out of S3, into something like Cloudflare R2. 1. The sponsor generates an IAM user and the correspond

The sponsor could use this to enable a one-time migration out of S3, into something like Cloudflare R2. 1. The sponsor generates an IAM user and the corresponding access key to access objects in the NixOS buckets. 2. The NixOS operator grants access to said IAM user and (this is important) enables "requester pays" on the buckets so that the sponsor is billed. 3. The sponsor's keys are added to Cloudflare R2, which pulls objects from S3 and stores them.