I was talking with @ssempervirens earlier about her work on #25, and I got to thinking: Rather than straining against the limits of what we can do through shelling out to the AWS CLI like we currently do (e.g., #6, #7, #20, #22), should we instead use the underlying SDK (boto3) and implement some of these features in a more Pythonic (and ultimately more flexible) way?
It'd be a relatively serious overhaul, but I think it'd just about all be confined to the datakit_data.s3 module. Credential management is likely to be the biggest challenge.