You could set the policy to expire on some far-future date, then sign it once and forget it. You'd essentially be giving world-write access to your bucket, of

You could set the policy to expire on some far-future date, then sign it once and forget it. You'd essentially be giving world-write access to your bucket, of course. It would be better to issue signed policies with enforced key names and the like.