Comment by mje__

It will cost you if you have a malicious uploader. I'm pretty sure S3 is not free just because you had objects in there for less than 24h.

S3 supports pre-signed urls for exactly this use-case.

EDIT: Nope, my bad. Doesn't look like S3 supports pre-signed urls for multipart uploads