Are presigned URLs a HIPAA risk? The presigned URL gap in HIPAA S3 compliance

Presigned URLs bypass IAM and bucket policies. Without s3:signatureAge or s3:authType conditions, a leaked URL is a PHI data breach. Here's the gap most teams miss.