[anonymouse008]

I’ve become old. If you look at these things in disgust (ACL vs Policies, Delete bucket with s3:*, etc), you’re missing the point of (deterministic ?) software. It does what it is written to do, faithfully, and error out when not. When it doesn’t do as written or as documented, then yes… go full bore.

[temac]

The doc is huge, and the principle of least astonishment is often not respected.

Also third parties providers support a random subset of it given the protocol has nothing simple anymore (or maybe never had)