fix variable
Payload and bootstrap scripts

Upload payload directory to an obfuscated S3 bucket, generate a URL
with a 1 hour expiration time, pass URL to CF template for download.
Run bootstrap scripts from CF if they are present.

Need to implement S3 lifecycle to delete object and bucket afterwards,
and possibly better lock down security to only the generated URL?