I am trying to understand exactly how to setup a bucket that is generally private but allows anonymous uploads with restrictions. The specific criteria are:
I recently spent a bit of time figuring out the ins and outs of anonymous uploads to S3, and came across this question as well. I wrote about the solution that worked for ME in some length at:
https://gist.github.com/jareware/d7a817a08e9eae51a7ea
Basically you can achieve what you want to, except that authenticated requests for management won't work (or at least I'm not aware of a solution).
I know this is an older question but just documenting it here in case it helps someone else.