...
silo-us-*.s3*.amazonaws.com
2. These items will account for any bucket type/name in the regions we (currently) use. If we add new US regions, they would have to add new rules.
...
silo-us-*-uswest2.s3-us-west-2.amazonaws.com
3. These items are the most restrictive, and any changes/additions we make to bucket types and US regions in the future will need to be manually added.
...