Our instance gets around this problem by not storing content from other servers on S3 (our content is still stored on S3). Instead the requests are proxied through our instance, but we have Cloudflare sitting in front of the proxy. On Cloudflare, we have rules to enforce strict caching policies implemented for any valid content served.