在CLI命令中不指定Region访问S3时，会访问到s3-1.amazonaws.com域名，该如何对此域名进行权限管控

【以下的回答经过翻译处理】 s3-1.amazonaws.com是s3.us-east-1.amazonaws.com的别名。您可以通过nslookup查看它：

bash$ nslookup s3.amazonaws.com
Server:		10.106.65.245
Address:	10.106.65.245#53

Non-authoritative answer:
s3.amazonaws.com	canonical name = s3-1.amazonaws.com.
s3-1.amazonaws.com	canonical name = s3.us-east-1.amazonaws.com.
Name:	s3.us-east-1.amazonaws.com
Address: 52.216.8.101

如果您没有指定AWS_DEFAULT_REGION，则默认为us-east-1。