Azure provides shared access signatures (, , ) that can delegate access (read/write) to specific blobs/containers/tables/queues in an Azure Storage account using an access key generated through the REST API. Does AWS offer a similar feature?
Presigned URL in S3 is the equivalent:
There are also ways to generate them with SDKs not mentioned in this documentation, you can google it.
Python for example: