I think that’s because S3 changed their default permission settings.
The settings when I create it manually
The settings when Discourse creates it