Protected mode means that everyone can read the file but only the owner can write to it. Read more here: https://docs.amplify.aws/lib/storage/configureaccess/q/platform/js

If you need more control over the uploading you should consider using Signed URLs. https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.html#getSignedUrl-property