I\'ve read the documentation to upload files to S3 directly from the client\'s frontend using a Lambda API. I\'m curious why there aren\'t any major security concerns with this