If I understand correctly, it works as I thought: the upload will occupy space in the S3 bucket, which really worries me. While there is an automatic cleanup feature that works well under normal circumstances, malicious users can easily bypass posting restrictions and keep uploading files.