Copy to AWS S3 with minimal policy

using this policy and this command, was able to upload a file

rclone copy file.ext zork: -vv --s3-no-check-bucket --s3-no-head --s3-no-head-object

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::redacted:user/name"
      },
      "Action": "s3:PutObject",
      "Resource": [
        "arn:aws:s3:::bucket/*",
        "arn:aws:s3:::bucket"
      ]
    }
  ]
}

and redacted debug output

rclone copy file.ext zork: -vv --s3-no-check-bucket --s3-no-head --s3-no-head-object 
DEBUG : file.ext: Sizes differ (src 1 vs dst 0)
DEBUG : file.ext: md5 = c4ca4238a0b923820dcc509a6f75849b OK
INFO  : file.ext: Copied (replaced existing)
INFO  : 
Transferred:   	          1 B / 1 B, 100%, 0 B/s, ETA -
Transferred:            1 / 1, 100%