Our prod bucket predates CFN management, so we can't use the mechanism :relud implemented that I attempted to update in https://github.com/mozilla-services/svcops/pull/681. :relud is going to work on setting this up via ansible instead. As part of this, we'd like to additionally add to the top level sources.json the expiration policy (this in effect means sources.json will be version controlled).
https://github.com/mozilla-services/svcops/pull/709 fixed the method for managing s3 buckets to handle existing buckets. sources.json was left alone.