merge the creds
use s3 bucket directly
user the file's public url first