I read it too. 1) do not make the bucket public 2) using tools like pulumi the name indeed is random 3) if you indeed intend to make the bucket public you can use the requestor pays mode https://docs.aws.amazon.com/AmazonS3/latest/userguide/RequesterPaysBuckets.html