diff --git a/etc/evergreen_yml_components/definitions.yml b/etc/evergreen_yml_components/definitions.yml
index bbe5c46e1e8..cb137bb2e31 100644
--- a/etc/evergreen_yml_components/definitions.yml
+++ b/etc/evergreen_yml_components/definitions.yml
@@ -641,8 +641,8 @@ functions:
       local_file: src/bazel-bin/dist-test-debug.${ext|tgz}
       remote_file: ${mongo_debugsymbols}
       bucket: mciuploads
-      permissions: ${mciuploads_binary_permissions|public-read}
-      visibility: ${mciuploads_binary_visibility|public}
+      permissions: ${mciuploads_binary_permissions|private}
+      visibility: ${mciuploads_binary_visibility|signed}
       content_type: ${content_type|application/gzip}
       display_name: mongo-debugsymbols.${ext|tgz}
 
@@ -2959,8 +2959,8 @@ functions:
       local_file: mongo-tests.tgz
       remote_file: ${project}/${build_variant}/${revision}/tests/mongo-tests-${build_id}-${task_name}-${execution}.tgz
       bucket: mciuploads
-      permissions: ${mciuploads_binary_permissions|public-read}
-      visibility: ${mciuploads_binary_visibility|public}
+      permissions: ${mciuploads_binary_permissions|private}
+      visibility: ${mciuploads_binary_visibility|signed}
       content_type: application/gzip
       display_name: Test binaries and libraries - Execution ${execution}
       optional: true
@@ -3073,8 +3073,8 @@ functions:
       local_file: src/mongo-hanganalyzer.tgz
       remote_file: ${project}/${build_variant}/${revision}/hanganalyzer/mongo-hanganalyzer-${build_id}-${task_name}-${execution}.tgz
       bucket: mciuploads
-      permissions: ${mciuploads_binary_permissions|public-read}
-      visibility: ${mciuploads_binary_visibility|public}
+      permissions: ${mciuploads_binary_permissions|private}
+      visibility: ${mciuploads_binary_visibility|signed}
       content_type: application/gzip
       display_name: Hang Analyzer Output - Execution ${execution}
       optional: true
diff --git a/etc/evergreen_yml_components/tasks/compile_tasks.yml b/etc/evergreen_yml_components/tasks/compile_tasks.yml
index 25336cb342a..023df2c8d06 100644
--- a/etc/evergreen_yml_components/tasks/compile_tasks.yml
+++ b/etc/evergreen_yml_components/tasks/compile_tasks.yml
@@ -389,8 +389,8 @@ tasks:
           local_file: src/bazel-bin/mongo_benchmark-stripped.${ext|tgz}
           remote_file: ${mongo_benchmarks}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -417,8 +417,8 @@ tasks:
           local_file: src/bazel-bin/mongo_benchmark-debug.${ext|tgz}
           remote_file: ${mongo_benchmarks_debugsymbols}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks Debug
 
@@ -528,8 +528,8 @@ tasks:
           local_file: src/bazel-bin/dbtest.${ext|tgz}
           remote_file: ${project}/${build_variant}/${revision}/dbtest/dbtest-${build_id}-${task_name}-${execution}.tgz
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: dbtest binary - Execution ${execution}
           optional: true
@@ -585,8 +585,8 @@ tasks:
           local_file: src/bazel-bin/mongo-stripped.${ext|tgz}
           remote_file: ${mongo_jstestshell}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: Jstestshell
       - command: s3.put
@@ -596,8 +596,8 @@ tasks:
           local_file: src/bazel-bin/mongo-stripped.${ext|tgz}.sha256
           remote_file: ${mongo_jstestshell}.sha256
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: text/plain
           display_name: Jstestshell SHA256
 
@@ -618,8 +618,8 @@ tasks:
           local_file: src/bazel-bin/mongo-debug.${ext|tgz}
           remote_file: ${mongo_jstestshell_debugsymbols}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: Jstestshell Debugsymbols
 
@@ -653,8 +653,8 @@ tasks:
           local_file: "src/bazel-bin/stitch_support.${ext|tgz}"
           remote_file: "${project}/stitch-support/${build_variant}/${revision}/stitch-support-${version}.tgz"
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: "Stitch Support Library"
 
@@ -709,8 +709,8 @@ tasks:
           local_file: "src/bazel-bin/mongo_crypt-stripped.${ext|tgz}"
           remote_file: "${project}/mongo_crypt/${build_variant}/${revision}/mongo_crypt_shared_v1_dev-${version}.${ext|tgz}"
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/tar}
           display_name: "Mongo Crypt Library dev"
       - command: s3.put
@@ -720,8 +720,8 @@ tasks:
           local_file: "src/bazel-bin/mongo_crypt-debug.${ext|tgz}"
           remote_file: "${project}/mongo_crypt/${build_variant}/${revision}/mongo_crypt_shared_v1_debug-${version}.${ext|tgz}"
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/tar}
           display_name: "Mongo Crypt Library debug"
 
@@ -744,8 +744,8 @@ tasks:
           local_file: "src/bazel-bin/mongo_crypt_shlib_test-stripped.${ext|tgz}"
           remote_file: "${project}/mongo_crypt/${build_variant}/${revision}/mongo_crypt_shlib_test-${version}.${ext|tgz}"
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/tar}
           display_name: "Mongo Crypt Shared Library Test"
 
@@ -1027,8 +1027,8 @@ tasks:
           local_file: src/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           skip_existing: ${is_release}
@@ -1039,8 +1039,8 @@ tasks:
           local_file: src/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           skip_existing: ${is_release}
@@ -1050,8 +1050,8 @@ tasks:
           aws_secret: ${aws_secret}
           local_file: src/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           bucket: ${push_bucket}
           content_type: text/plain
           remote_file: ${push_path}/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
@@ -1061,8 +1061,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           local_file: src/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha256
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
           content_type: text/plain
@@ -1075,8 +1075,8 @@ tasks:
           local_file: src/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: text/plain
           remote_file: ${push_path}/mongo_crypt_shared_v1-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           skip_existing: ${is_release}
diff --git a/etc/evergreen_yml_components/tasks/compile_tasks_nightly.yml b/etc/evergreen_yml_components/tasks/compile_tasks_nightly.yml
index 79eb999f4de..92c36f0f932 100644
--- a/etc/evergreen_yml_components/tasks/compile_tasks_nightly.yml
+++ b/etc/evergreen_yml_components/tasks/compile_tasks_nightly.yml
@@ -98,8 +98,8 @@ tasks:
           local_file: msi-files-signed.tgz
           remote_file: ${project}/${build_variant}/${revision}/artifacts/${build_id}-msi-files-signed.tgz
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: application/tar
           display_name: MSI Files
 
@@ -199,8 +199,8 @@ tasks:
           local_file: src/mongodb-dist-test-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-dist-test-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           skip_existing: ${is_release}
@@ -211,8 +211,8 @@ tasks:
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           skip_existing: ${is_release}
@@ -223,8 +223,8 @@ tasks:
           local_file: src/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}
           skip_existing: ${is_release}
@@ -236,8 +236,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           local_file: src/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}
           bucket: ${push_bucket}
           content_type: ${content_type|application/gzip}
@@ -252,8 +252,8 @@ tasks:
           local_file: src/mongodb-dist-test-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-dist-test-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           skip_existing: ${is_release}
@@ -264,8 +264,8 @@ tasks:
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           skip_existing: ${is_release}
@@ -277,8 +277,8 @@ tasks:
           local_file: src/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: ${content_type|application/gzip}
           remote_file: ${push_path}/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sig
           skip_existing: ${is_release}
@@ -289,8 +289,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           local_file: src/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.sig
           bucket: ${push_bucket}
           content_type: ${content_type|application/gzip}
@@ -303,8 +303,8 @@ tasks:
         params:
           aws_key: ${aws_key}
           aws_secret: ${aws_secret}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           build_variants: ["enterprise-windows", "windows"]
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.msi
           bucket: ${push_bucket}
@@ -318,8 +318,8 @@ tasks:
           aws_secret: ${aws_secret}
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           bucket: ${push_bucket}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
@@ -331,8 +331,8 @@ tasks:
           aws_secret: ${aws_secret}
           local_file: src/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           bucket: ${push_bucket}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha1
@@ -344,8 +344,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           aws_key: ${aws_key}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           local_file: src/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.sha1
           bucket: ${push_bucket}
           content_type: text/plain
@@ -358,8 +358,8 @@ tasks:
         params:
           aws_key: ${aws_key}
           aws_secret: ${aws_secret}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           build_variants: ["enterprise-windows", "windows"]
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.msi.sha1
           bucket: ${push_bucket}
@@ -372,8 +372,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha256
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
           content_type: text/plain
@@ -385,8 +385,8 @@ tasks:
         params:
           aws_secret: ${aws_secret}
           local_file: src/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.sha256
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           aws_key: ${aws_key}
           bucket: ${push_bucket}
           content_type: text/plain
@@ -401,8 +401,8 @@ tasks:
           local_file: src/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.sha256
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.sha256
           skip_existing: ${is_release}
@@ -416,8 +416,8 @@ tasks:
           build_variants: ["enterprise-windows", "windows"]
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.msi.sha256
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}-signed.msi.sha256
           skip_existing: ${is_release}
           content_type: text/plain
@@ -429,8 +429,8 @@ tasks:
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           skip_existing: ${is_release}
@@ -442,8 +442,8 @@ tasks:
           local_file: src/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           aws_key: ${aws_key}
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-cryptd-${push_name}-${push_arch}-${suffix}.${ext|tgz}.md5
           skip_existing: ${is_release}
@@ -457,8 +457,8 @@ tasks:
           local_file: src/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.md5
           bucket: ${push_bucket}
           content_type: text/plain
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-debugsymbols-${suffix}.${ext|tgz}.md5
           skip_existing: ${is_release}
           optional: true
@@ -471,8 +471,8 @@ tasks:
           build_variants: ["enterprise-windows", "windows"]
           local_file: src/mongodb-${push_name}-${push_arch}-${suffix}.msi.md5
           bucket: ${push_bucket}
-          permissions: ${mciuploads_binary_permissions_push|public-read}
-          visibility: ${mciuploads_binary_visibility_push|public}
+          permissions: ${mciuploads_binary_permissions_push|private}
+          visibility: ${mciuploads_binary_visibility_push|signed}
           content_type: text/plain
           remote_file: ${push_path}/mongodb-${push_name}-${push_arch}-${suffix}-signed.msi.md5
           skip_existing: ${is_release}
diff --git a/etc/evergreen_yml_components/tasks/compile_tasks_shared.yml b/etc/evergreen_yml_components/tasks/compile_tasks_shared.yml
index 46cb3f9f470..644062aab8a 100644
--- a/etc/evergreen_yml_components/tasks/compile_tasks_shared.yml
+++ b/etc/evergreen_yml_components/tasks/compile_tasks_shared.yml
@@ -154,8 +154,8 @@ tasks:
           local_file: src/bazel-bin/dist-test-stripped.${ext|tgz}
           remote_file: ${mongo_binaries}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/gzip
           # Sys-perf relies on this display name, please reach out before changing it.
           display_name: Binaries
@@ -167,8 +167,8 @@ tasks:
           local_file: src/bazel-bin/dist-test-stripped.${ext|tgz}.sha256
           remote_file: ${mongo_binaries}.sha256
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: text/plain
           display_name: Binaries SHA256
       - command: subprocess.exec
@@ -357,8 +357,8 @@ tasks:
           local_file: src/version_info_mongod.txt
           remote_file: ${project}/${build_variant}/${version_id}/version-info-mongod-${task_id}.txt
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: text/plain
           display_name: mongod --version output
 
@@ -412,8 +412,8 @@ tasks:
           local_file: "src/bazel-bin/mongo_crypt-stripped.${ext|tgz}"
           remote_file: "${project}/mongo_crypt/${build_variant}/${revision}/mongo_crypt_shared_v1-${version}.${ext|tgz}"
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/tar}
           display_name: "Mongo crypt Library"
 
@@ -459,8 +459,8 @@ tasks:
           local_file: packages.tgz
           remote_file: ${project}/${build_variant}/${revision}/artifacts/${build_id}-packages.tgz
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Packages
 
@@ -503,8 +503,8 @@ tasks:
           local_file: src/bazel-bin/dist-stripped.${ext|tgz}
           remote_file: ${project}/${build_variant}/${revision}/dist/mongo-${build_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Dist Tarball
       - command: s3.put
@@ -515,8 +515,8 @@ tasks:
           local_file: src/bazel-bin/dist-debug.${ext|tgz}
           remote_file: ${project}/${build_variant}/${revision}/dist/mongo-${build_id}-debugsymbols.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Dist Debugsymbols
       - command: subprocess.exec
@@ -534,8 +534,8 @@ tasks:
           local_file: src/bazel-bin/mongo-stripped.${ext|tgz}
           remote_file: ${mongo_jstestshell}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: Jstestshell
       - command: s3.put
@@ -545,8 +545,8 @@ tasks:
           local_file: src/bazel-bin/mongo-stripped.${ext|tgz}.sha256
           remote_file: ${mongo_jstestshell}.sha256
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: text/plain
           display_name: Jstestshell SHA256
       - command: s3.put
@@ -556,8 +556,8 @@ tasks:
           local_file: src/bazel-bin/mongo-debug.${ext|tgz}
           remote_file: ${mongo_jstestshell_debugsymbols}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: Jstestshell Debugsymbols
       - command: s3.put
@@ -568,8 +568,8 @@ tasks:
           local_file: src/bazel-bin/mongocryptd-stripped.${ext|tgz}
           remote_file: ${mongo_cryptd}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: CryptD Binaries
       - command: s3.put
@@ -580,8 +580,8 @@ tasks:
           local_file: src/bazel-bin/mongocryptd-debug.${ext|tgz}
           remote_file: ${mongo_cryptd_debugsymbols}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: ${content_type|application/gzip}
           display_name: CryptD Debugsymbols
       - func: "run packager.py"
@@ -600,8 +600,8 @@ tasks:
           local_file: packages.tgz
           remote_file: ${project}/${build_variant}/${revision}/artifacts/${build_id}-packages.tgz
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Packages
       # We perform package task generally in the middle of larger task groups running
diff --git a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/clusters_and_integrations/tasks.yml b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/clusters_and_integrations/tasks.yml
index 46fa6f66d00..6f5c9af491c 100644
--- a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/clusters_and_integrations/tasks.yml
+++ b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/clusters_and_integrations/tasks.yml
@@ -251,8 +251,8 @@ tasks:
           local_file: src/bazel-bin/first_half_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/first_half_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -288,8 +288,8 @@ tasks:
           local_file: src/bazel-bin/second_half_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/second_half_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -325,8 +325,8 @@ tasks:
           local_file: src/bazel-bin/sep_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/sep_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -1216,8 +1216,8 @@ tasks:
           local_file: src/bazel-bin/sharding_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/sharding_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -1252,8 +1252,8 @@ tasks:
           local_file: src/bazel-bin/bsoncolumn_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/bsoncolumn_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
diff --git a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/durable_transactions_and_availability/tasks.yml b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/durable_transactions_and_availability/tasks.yml
index 36c0823f316..15bad2bd5ac 100644
--- a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/durable_transactions_and_availability/tasks.yml
+++ b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/durable_transactions_and_availability/tasks.yml
@@ -138,8 +138,8 @@ tasks:
           local_file: src/bazel-bin/repl_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/repl_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
@@ -1921,8 +1921,8 @@ tasks:
           local_file: src/bazel-bin/storage_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/storage_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
diff --git a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/query/tasks.yml b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/query/tasks.yml
index 6fc57fa0890..c8a7734891e 100644
--- a/etc/evergreen_yml_components/tasks/resmoke/server_divisions/query/tasks.yml
+++ b/etc/evergreen_yml_components/tasks/resmoke/server_divisions/query/tasks.yml
@@ -2437,8 +2437,8 @@ tasks:
           local_file: src/bazel-bin/query_bm.${ext|tgz}
           remote_file: ${project}/${compile_variant}/${version_id}/binaries/query_bm-${revision_order_id}.${ext|tgz}
           bucket: mciuploads
-          permissions: ${mciuploads_binary_permissions|public-read}
-          visibility: ${mciuploads_binary_visibility|public}
+          permissions: ${mciuploads_binary_permissions|private}
+          visibility: ${mciuploads_binary_visibility|signed}
           content_type: application/tar
           display_name: Benchmarks
 
diff --git a/etc/evergreen_yml_components/variants/amazon/test_dev.yml b/etc/evergreen_yml_components/variants/amazon/test_dev.yml
index 92dbfdad631..9761f4b9405 100644
--- a/etc/evergreen_yml_components/variants/amazon/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/amazon/test_dev.yml
@@ -16,6 +16,8 @@ variables:
     stepback: false
 
   - &linux-arm64-static-enterprise-compile-expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
     bazel_compile_flags: >-
       --define=MONGO_DISTMOD=amazon2023
@@ -30,6 +32,8 @@ variables:
   # - etc/evergreen_yml_components/variants/amazon/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_arm64_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: amazon2023
     multiversion_edition: enterprise
     multiversion_architecture: aarch64
@@ -95,8 +99,6 @@ buildvariants:
       compile_variant: *amazon-linux2023-arm64-static-compile
       evergreen_remote_exec: on
       skip_debug_link: true
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
       remote_link: true
       resmoke_tests_tag_filter: ci-development-critical-single-variant
       # Boost the priority on remote execution since this is the longest running task chain in
@@ -176,8 +178,6 @@ buildvariants:
       evergreen_remote_exec: on
       skip_debug_link: true
       remote_link: true
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
       resmoke_tests_tag_filter: ci-development-critical-single-variant
     tasks:
       - name: run_unit_tests_TG
@@ -272,8 +272,6 @@ buildvariants:
       has_packages: false
       skip_symbolization: true
       evergreen_remote_exec: on
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
       build_timeout_seconds: 1440
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2023
@@ -497,8 +495,6 @@ buildvariants:
         --remote_execution_priority=1
       evergreen_remote_exec: on
       skip_debug_link: true
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
     run_on:
       - amazon2023.3-arm64-xlarge
     tasks:
diff --git a/etc/evergreen_yml_components/variants/amazon/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/amazon/test_dev_master_branch_only.yml
index bf6583873c2..60b66dc3539 100644
--- a/etc/evergreen_yml_components/variants/amazon/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/amazon/test_dev_master_branch_only.yml
@@ -16,6 +16,8 @@ variables:
     stepback: false
 
   - &linux-arm64-dynamic-enterprise-compile-expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
     bazel_compile_flags: >-
       --define=MONGO_DISTMOD=amazon2023
@@ -45,6 +47,8 @@ variables:
   # - etc/evergreen_yml_components/variants/amazon/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_arm64_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: amazon2023
     multiversion_edition: enterprise
     multiversion_architecture: aarch64
@@ -81,6 +85,8 @@ buildvariants:
     run_on:
       - amazon2023-arm64-latest-m8g-4xlarge
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2023
         --config=local
@@ -99,6 +105,8 @@ buildvariants:
       - rhel81-power8-large
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *rhel81-ppc64le-bazel-compile
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=rhel81
@@ -117,6 +125,8 @@ buildvariants:
       - rhel83-zseries-large
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *rhel83-s390x-bazel-compile
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=rhel83
@@ -210,6 +220,8 @@ buildvariants:
       - amazon2023-arm64-atlas-latest-m8g-xlarge
     stepback: true
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: amazon-linux2023-arm64-lto-pgo-bolt
       has_packages: false
       jstestfuzz_num_generated_files: 40
@@ -393,6 +405,8 @@ buildvariants:
     run_on:
       - amazon2023.3-arm64-m6g-4xlarge
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       build_timeout_seconds: 900
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2023
diff --git a/etc/evergreen_yml_components/variants/amazon/test_release.yml b/etc/evergreen_yml_components/variants/amazon/test_release.yml
index d85e43c8f66..a47bf4353c1 100644
--- a/etc/evergreen_yml_components/variants/amazon/test_release.yml
+++ b/etc/evergreen_yml_components/variants/amazon/test_release.yml
@@ -409,8 +409,6 @@ buildvariants:
     run_on:
       - amazon2023.3-arm64-m8g-xlarge
     expansions: &enterprise-amazon2023-arm64-dynamic-expansions
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
       mciuploads_binary_permissions_push: public-read
       mciuploads_binary_visibility_push: public
       additional_package_targets: archive-mongocryptd-stripped archive-mongocryptd-debug
diff --git a/etc/evergreen_yml_components/variants/codecoverage/test_dev.yml b/etc/evergreen_yml_components/variants/codecoverage/test_dev.yml
index f10cf30538d..63876ba89ca 100644
--- a/etc/evergreen_yml_components/variants/codecoverage/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/codecoverage/test_dev.yml
@@ -9,6 +9,8 @@ buildvariants:
     cron: "0 4 * * *" # From the ${project_nightly_cron} parameter.
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       test_flags: --excludeWithAnyTags=resource_intensive,incompatible_with_gcov
       bazel_compile_flags: >-
         --allocator=system
@@ -62,6 +64,8 @@ buildvariants:
     cron: "0 4 * * *" # From the ${project_nightly_cron} parameter.
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       test_flags: --excludeWithAnyTags=resource_intensive,incompatible_with_gcov
       bazel_compile_flags: >-
         --allocator=system
diff --git a/etc/evergreen_yml_components/variants/coverity.yml b/etc/evergreen_yml_components/variants/coverity.yml
index 1b78e45c106..b9ee61304b0 100644
--- a/etc/evergreen_yml_components/variants/coverity.yml
+++ b/etc/evergreen_yml_components/variants/coverity.yml
@@ -7,6 +7,9 @@ buildvariants:
     # Run at 4 am UTC everyday
     cron: "30 4 * * *"
     run_on: ubuntu2404-xlarge
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     modules:
       - devprod_coverity
     tasks:
diff --git a/etc/evergreen_yml_components/variants/macos/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/macos/test_dev_master_branch_only.yml
index 3915256edfe..3e1d53eea0a 100644
--- a/etc/evergreen_yml_components/variants/macos/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/macos/test_dev_master_branch_only.yml
@@ -11,6 +11,8 @@ buildvariants:
     run_on:
       - macos-14-arm64
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *enterprise-macos-arm64
       test_flags: --excludeWithAnyTags=incompatible_with_macos,requires_gcm,slow_on_macos
       resmoke_jobs_max: 6
diff --git a/etc/evergreen_yml_components/variants/misc/misc.yml b/etc/evergreen_yml_components/variants/misc/misc.yml
index 4d57fe790c8..75afed52eb2 100644
--- a/etc/evergreen_yml_components/variants/misc/misc.yml
+++ b/etc/evergreen_yml_components/variants/misc/misc.yml
@@ -12,6 +12,8 @@ buildvariants:
     run_on:
       - rhel8.8-medium
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       large_distro_name: rhel8.8-large
       core_analyzer_distro_name: rhel8.8-xlarge
       burn_in_tag_include_all_required_and_suggested: true
@@ -48,6 +50,9 @@ buildvariants:
     tags: ["assigned_to_jira_team_devprod_release_infrastructure"]
     activate: true
     run_on: ubuntu2404-small
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     modules:
       - devprod_coverity
     tasks:
@@ -65,6 +70,9 @@ buildvariants:
     allowed_requesters: ["patch"]
     tags: ["assigned_to_jira_team_platsec_server"]
     run_on: ubuntu2404-small
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     modules:
       - devprod_coverity
     tasks:
@@ -74,6 +82,9 @@ buildvariants:
     display_name: "Promote Custom Build"
     activate: false
     allowed_requesters: ["patch"]
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     tasks:
       - name: promote_custom_build
 
@@ -81,6 +92,9 @@ buildvariants:
     display_name: "Promote Sys-perf Build"
     activate: false
     allowed_requesters: ["patch"]
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     tasks:
       - name: promote_sys_perf_build
 
@@ -90,6 +104,9 @@ buildvariants:
     activate: true
     run_on:
       - ubuntu2204-small
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     stepback: false
     tasks:
       - name: sync_repo_with_copybara
@@ -106,6 +123,9 @@ buildvariants:
       - "poetry_requirements.txt"
     run_on:
       - ubuntu2204-large
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     tasks:
       - name: devcontainer_test
 
@@ -117,6 +137,8 @@ buildvariants:
     cron: "0 6 * * 1-5"
     run_on: rhel92-small
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       ENDOR_NAMESPACE: mongodb.10gen
     stepback: false
     tasks:
diff --git a/etc/evergreen_yml_components/variants/misc/misc_master_branch_only.yml b/etc/evergreen_yml_components/variants/misc/misc_master_branch_only.yml
index 56e734d3a64..a1ab5ac4a09 100644
--- a/etc/evergreen_yml_components/variants/misc/misc_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/misc/misc_master_branch_only.yml
@@ -12,6 +12,8 @@ buildvariants:
     run_on:
       - rhel8.8-small
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       multiversion_platform: rhel8
       multiversion_edition: enterprise
       compile_variant: *stm-daily-cron
@@ -42,6 +44,8 @@ buildvariants:
     run_on:
       - amazon2023-arm64-latest-m8g-4xlarge
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: bazel-integration-tests
       evergreen_remote_exec: on
       multiversion_platform: amazon2023
diff --git a/etc/evergreen_yml_components/variants/misc/task_generation.yml b/etc/evergreen_yml_components/variants/misc/task_generation.yml
index 7749f31492f..f40f1209c50 100644
--- a/etc/evergreen_yml_components/variants/misc/task_generation.yml
+++ b/etc/evergreen_yml_components/variants/misc/task_generation.yml
@@ -11,6 +11,9 @@ buildvariants:
     activate: true
     run_on:
       - rhel8.8-medium
+    expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
     tasks:
       - name: version_gen
       - name: version_burn_in_gen
diff --git a/etc/evergreen_yml_components/variants/mongot/test_dev.yml b/etc/evergreen_yml_components/variants/mongot/test_dev.yml
index a8d6c564dea..4c3c512f09d 100644
--- a/etc/evergreen_yml_components/variants/mongot/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/mongot/test_dev.yml
@@ -10,6 +10,8 @@ buildvariants:
     run_on:
       - amazon2023.3-small
     expansions: &amazon-linux-2023-x86-mongot-integration-expansions
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       build_mongot: true
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2023
@@ -79,6 +81,8 @@ buildvariants:
     run_on:
       - amazon2023.3-arm64-m8g-xlarge
     expansions: &amazon2023-arm64-mongot-integration-expansions
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       build_mongot: true
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2023
@@ -150,6 +154,8 @@ buildvariants:
       - amazon2-arm64-latest-m8g-xlarge
     stepback: true
     expansions: &amazon-linux2-arm64-mongot-integration-expansions
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       build_mongot: true
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2
@@ -213,6 +219,8 @@ buildvariants:
     run_on:
       - amazon2-latest-large
     expansions: &amazon2-x86-mongot-integration-expansions
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       build_mongot: true
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=amazon2
@@ -268,6 +276,8 @@ buildvariants:
       - rhel8.8-medium
     tags: []
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *enterprise-rhel-8-64-mongot-integration
       has_packages: false
       build_mongot: true
diff --git a/etc/evergreen_yml_components/variants/rhel/test_dev.yml b/etc/evergreen_yml_components/variants/rhel/test_dev.yml
index c5930f4669a..cb1b2ec0e9c 100644
--- a/etc/evergreen_yml_components/variants/rhel/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/rhel/test_dev.yml
@@ -20,6 +20,8 @@ variables:
   # - etc/evergreen_yml_components/variants/rhel/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux-x86-dynamic-enterprise-compile-expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
     bazel_compile_flags: >-
       --define=MONGO_DISTMOD=rhel88
@@ -60,6 +62,8 @@ variables:
   # - etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_x86_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: rhel8
     multiversion_edition: enterprise
     repo_edition: enterprise
diff --git a/etc/evergreen_yml_components/variants/rhel/test_dev_master_and_lts_branches_only.yml b/etc/evergreen_yml_components/variants/rhel/test_dev_master_and_lts_branches_only.yml
index 3adc1bc132a..7942790df5e 100644
--- a/etc/evergreen_yml_components/variants/rhel/test_dev_master_and_lts_branches_only.yml
+++ b/etc/evergreen_yml_components/variants/rhel/test_dev_master_and_lts_branches_only.yml
@@ -39,6 +39,8 @@ variables:
   # - etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_x86_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: rhel8
     multiversion_edition: enterprise
     repo_edition: enterprise
@@ -54,6 +56,8 @@ buildvariants:
     run_on:
       - rhel8.8-small
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
diff --git a/etc/evergreen_yml_components/variants/rhel/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/rhel/test_dev_master_branch_only.yml
index a28f1a0e700..b7826c7bf42 100644
--- a/etc/evergreen_yml_components/variants/rhel/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/rhel/test_dev_master_branch_only.yml
@@ -20,6 +20,8 @@ variables:
   # - etc/evergreen_yml_components/variants/rhel/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux-x86-dynamic-enterprise-compile-expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
     bazel_compile_flags: >-
       --dtlto=False
@@ -47,6 +49,8 @@ variables:
   # - etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &generic_linux_compile_expansions # The most commonly used compile expansions.
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
 
   # THIS HAS COPIES IN:
@@ -83,6 +87,8 @@ variables:
   # - etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_x86_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: rhel8
     multiversion_edition: enterprise
     repo_edition: enterprise
@@ -114,6 +120,8 @@ variables:
     run_on:
       - rhel8.8-small
     expansions: &enterprise-rhel-8-64-bit-expansions-template
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
@@ -219,6 +227,8 @@ buildvariants:
     display_name: "* Linux x86 Stitch Enterprise Compile"
     tags: ["suggested"]
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *linux-stitch-compile-suggested
     tasks:
       - name: .stitch
@@ -228,6 +238,8 @@ buildvariants:
     display_name: "* Linux x86 Crypt Enterprise Compile"
     tags: ["suggested"]
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *linux-crypt-compile
     tasks:
       - name: .crypt
@@ -358,6 +370,8 @@ buildvariants:
     run_on:
       - rhel8.8-large
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       bazel_compile_flags: >-
         --define=MONGO_DISTMOD=rhel88
         --dbg_level=1
diff --git a/etc/evergreen_yml_components/variants/sanitizer/test_dev.yml b/etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
index 2d380825f05..2aa7b77a0ac 100644
--- a/etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
@@ -39,6 +39,8 @@ variables:
   # - etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &generic_linux_compile_expansions # The most commonly used compile expansions.
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
 
   # THIS HAS COPIES IN:
@@ -58,6 +60,8 @@ variables:
   # - etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_x86_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: rhel8
     multiversion_edition: enterprise
     repo_edition: enterprise
diff --git a/etc/evergreen_yml_components/variants/sanitizer/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/sanitizer/test_dev_master_branch_only.yml
index 95f24331f07..4aede5b3a9d 100644
--- a/etc/evergreen_yml_components/variants/sanitizer/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/sanitizer/test_dev_master_branch_only.yml
@@ -12,6 +12,8 @@ variables:
   # - etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &generic_linux_compile_expansions # The most commonly used compile expansions.
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
 
   # THIS HAS COPIES IN:
@@ -49,6 +51,8 @@ variables:
   # - etc/evergreen_yml_components/variants/sanitizer/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &linux_x86_generic_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     multiversion_platform: rhel8
     multiversion_edition: enterprise
     repo_edition: enterprise
diff --git a/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_and_lts_branches_only.yml b/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_and_lts_branches_only.yml
index 37f6ea5eebd..c10dc6f3a87 100644
--- a/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_and_lts_branches_only.yml
+++ b/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_and_lts_branches_only.yml
@@ -14,8 +14,6 @@ variables:
       multiversion_edition: enterprise
       repo_edition: enterprise
       large_distro_name: ubuntu2204-large
-      mciuploads_binary_permissions: private
-      mciuploads_binary_visibility: signed
       antithesis_bazel_compile_flags: >-
         --//bazel/config:antithesis=True
         --copt=-fsanitize-coverage=trace-pc-guard
diff --git a/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_branch_only.yml
index 783ca0bdd91..ba493dd031e 100644
--- a/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/ubuntu/test_dev_master_branch_only.yml
@@ -13,6 +13,8 @@ buildvariants:
       - ubuntu2204-arm64-m8g-4xlarge
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *workstation_bazel_cache_hydration_arm64
       evergreen_remote_exec: on
     tasks:
@@ -28,6 +30,8 @@ buildvariants:
       - ubuntu2204-large
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *workstation_bazel_cache_hydration_x86_64
       evergreen_remote_exec: on
     tasks:
@@ -43,6 +47,8 @@ buildvariants:
       - rhel93-xxlarge
     stepback: false
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       compile_variant: *upload_source_graph_index
       evergreen_remote_exec: on
     tasks:
diff --git a/etc/evergreen_yml_components/variants/windows/test_dev.yml b/etc/evergreen_yml_components/variants/windows/test_dev.yml
index 6d6bf1e26af..85b6eb3cef5 100644
--- a/etc/evergreen_yml_components/variants/windows/test_dev.yml
+++ b/etc/evergreen_yml_components/variants/windows/test_dev.yml
@@ -26,6 +26,8 @@ variables:
   # - etc/evergreen_yml_components/variants/windows/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &windows_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     compile_variant: *windows_compile_variant_name
     burn_in_tests_build_variant: enterprise-windows-all-feature-flags-required
     exe: ".exe"
@@ -57,6 +59,8 @@ buildvariants:
       - windows-2022-xxlarge
     activate: true # These compile variants run on every commit to reduce latency of the auto-reverter.
     expansions: &windows_compile_expansions
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       exe: ".exe"
       ext: zip
       additional_package_targets: >-
diff --git a/etc/evergreen_yml_components/variants/windows/test_dev_master_and_lts_branches_only.yml b/etc/evergreen_yml_components/variants/windows/test_dev_master_and_lts_branches_only.yml
index bfd36b4d742..408173f6515 100644
--- a/etc/evergreen_yml_components/variants/windows/test_dev_master_and_lts_branches_only.yml
+++ b/etc/evergreen_yml_components/variants/windows/test_dev_master_and_lts_branches_only.yml
@@ -12,6 +12,8 @@ buildvariants:
     run_on:
       - windows-2022-small
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
diff --git a/etc/evergreen_yml_components/variants/windows/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/windows/test_dev_master_branch_only.yml
index e78ad579b04..db21caf4896 100644
--- a/etc/evergreen_yml_components/variants/windows/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/windows/test_dev_master_branch_only.yml
@@ -26,6 +26,8 @@ variables:
   # - etc/evergreen_yml_components/variants/windows/test_dev.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &windows_expansions
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     compile_variant: *windows_compile_variant_name
     burn_in_tests_build_variant: enterprise-windows-all-feature-flags-required
     exe: ".exe"
@@ -58,6 +60,8 @@ buildvariants:
     run_on:
       - windows-2022-small
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
@@ -88,6 +92,8 @@ buildvariants:
     run_on:
       - windows-2022-xxlarge # To accommodate OOD issues noted in BF-31698
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
diff --git a/etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml b/etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
index 68155761f6a..c6bb75398cd 100644
--- a/etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
+++ b/etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
@@ -27,6 +27,8 @@ variables:
   # - etc/evergreen_yml_components/variants/wiredtiger/test_dev_master_branch_only.yml
   # ANY MODIFICATIONS HERE SHOULD ALSO BE MADE IN THOSE FILES
   - &generic_linux_compile_expansions # The most commonly used compile expansions.
+    mciuploads_binary_permissions: public-read
+    mciuploads_binary_visibility: public
     has_packages: false
 
   # THIS HAS COPIES IN
@@ -76,6 +78,8 @@ buildvariants:
         # Without this we are adding extra dependencies on evergreen and it is causing strain
         omit_generated_tasks: true
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       use_wt_develop: true
       resmoke_jobs_factor: 0.5 # Avoid starting too many mongod's
       large_distro_name: rhel8.8-medium
@@ -131,6 +135,8 @@ buildvariants:
     modules:
       - wtdevelop
     expansions:
+      mciuploads_binary_permissions: public-read
+      mciuploads_binary_visibility: public
       additional_package_targets: >-
         archive-mongocryptd-stripped
         archive-mongocryptd-debug
diff --git a/etc/expansions.default.yml b/etc/expansions.default.yml
index 84c0065ac45..0c22d922313 100644
--- a/etc/expansions.default.yml
+++ b/etc/expansions.default.yml
@@ -27,8 +27,8 @@ npm_command: jstestfuzz
 tar: tar
 cmake_path: /opt/cmake/bin/cmake
 content_type: application/x-gzip
-mciuploads_binary_permissions: public-read
-mciuploads_binary_visibility: public
+mciuploads_binary_permissions: private
+mciuploads_binary_visibility: signed
 mciuploads_binary_permissions_push: private
 mciuploads_binary_visibility_push: signed
 jstestfuzz_concurrent_num_files: "10"