Reverted to s3_file because of difficulties getting IAM role-based access to work.