s3 config on PUT; acl-public and cf-invalidate