How to Build a Secure S3 Bucket (And Why “Default” Isn’t Good Enough)

A practical checklist — and the reasoning behind every control.