You can do it with S3 policies. But that's already at the application level. The question above was about the server level below that.