bucket ENV
default ACL changed to public_read
source path
add support for uploading to 'paths'