Restrict S3 permissions.