This looks like it could be really nice for duplicating backups into a separate bucket with more severely locked-down access, to alleviate concerns about things like a disgruntled employee blowing away a backups bucket.