Typical object-level API tasks
- Upload an object
- Fetch or stream an object
- Delete an object
- Inspect object metadata
Validation checklist
- The bucket exists and the key is correct
- Authentication is scoped for the intended action
- Content type and cache behavior are set deliberately
- Private-access flows use short-lived authorization where appropriate

