- what happens when there are multiple S3 buckets? - what happens when the buckets are in different regions? - and each region requires its own token?