roles/storage.objectCreator) on the bucket. This allows PDFShift to upload new files without granting read, delete, or bucket administration permissions. Google recommends bucket-level IAM, especially with Uniform bucket-level access enabled.
You can grant access with the following command:
s3_destination parameter and use a value like: