always find bucket obj on fly so that we do not cache aws temp credentials on ec2 instance