It's interesting that they implement AWS bucket policies, including all AWS-specific syntax/keys/etc, even "arn": https://docs.hetzner.com/storage/object-storage/faq/s3-crede...
It seems the Hetzner's docs say they use MinIO to expose their S3 managed service. I guess everything will be the same as MinIO upstream features and contigurations
[0] https://docs.hetzner.com/storage/object-storage/overview#obj... [1] https://docs.ceph.com/en/latest/radosgw/s3/