store_s3 access control