intro bucket policy versioning replication storage classes express one zone lifecycle rules requesters pay event notificaitons performance batch operations storage lens S3 encryption DSSE KMs defaut encryption S3 Cors Access logs pre-signed urls glacier vauult lock & s3 object locks S3 Access points s3 object lambda