diff --git a/Cargo.lock b/Cargo.lock
index 0e9594bcd6..999f2ffa51 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1149,9 +1149,11 @@ dependencies = [
  "http 1.3.1",
  "log",
  "native-tls",
+ "rustls 0.22.4",
  "serde",
  "serde_json",
  "url",
+ "webpki-roots 0.26.2",
 ]
 
 [[package]]
@@ -9502,6 +9504,20 @@ dependencies = [
  "sct",
 ]
 
+[[package]]
+name = "rustls"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf4ef73721ac7bcd79b2b315da7779d8fc09718c6b3d2d1b2d94850eb8c18432"
+dependencies = [
+ "log",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki 0.102.8",
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "rustls"
 version = "0.23.13"
diff --git a/crates/api_clients/cloud_storage/Cargo.toml b/crates/api_clients/cloud_storage/Cargo.toml
index 20f74c5f0f..e84eb71608 100644
--- a/crates/api_clients/cloud_storage/Cargo.toml
+++ b/crates/api_clients/cloud_storage/Cargo.toml
@@ -36,7 +36,7 @@ env_logger = "0.11.3"
 async-trait = "0.1.75"
 # The "never-encode-slash" feature seems to have been removed:
 # https://github.com/durch/rust-s3/pull/254
-rust-s3 = { version = "0.36.0-beta.2" }
+rust-s3 = { version = "0.36.0-beta.2", default-features = false, features = ["fail-on-err", "tags", "tokio-rustls-tls"] }
 
 # Runtime
 tokio.workspace = true