private S3CannedACL GetCannedACL(BlobProperties properties) => properties?.Security == BlobSecurity.Public ? S3CannedACL.PublicRead : S3CannedACL.Private;