Permissions of live-to-VOD assets

In my live-to-VOD workflow with MediaPackage, a Harvest Job creates stream assets and saves them in an S3 bucket.

By default, the created assets are private.

I intend to use these assets with MediaConvert, but MediaConvert cannot access them because they are private files. It seems I need to manually make them publicly accessible so that MediaConvert can work on them in a new transcoding job.

Is there a way to either have MediaPackage save VOD assets as public files, or, is there a way to instantly provide MediaConvert with access to the live-to-VOD assets?