Securely Upload Files to S3 for Guests Using AWS Cognito
For security reasons, if you allow guest users to upload files from your app, it's better to use Guest Access from AWS Cognito instead of a direct AWS Access Key from an IAM User.
AWSNext.jsAmazon S3Amazon Cognito