Yes, you cannot have anything else besides Elasticcsearch changing the data on snapshot buckets, you cannot have an S3 lifecycle policy deleting objects as this would delete the objects related to snapshots.
That's the issue, required files were deleted by the S3 policy.