teasing out a gateway to separate aws specifics