Create a new S3 client each run (to avoid token expiration)