Heroku + PaperClip + s3 credentials... One for every app?

Am I supp开发者_如何学编程osed to create a new security credential on Amazon S3 for every app?

Whether or not it is required, I cannot say, but having separate security credentials for every application would be in line with the principle of least privilege, reducing the permissions and authority each program or process to what is strictly required to do its job.