I'm not sure with this library, but with other solutions you have a handshake endpoint on your server which creates a time-limited, single use token. The browser hits your server which then creates a key on S3 and sends it back to the client. The client can then use said key to upload on S3. Might be good to use SSL along with this.