S3 manager with permissions