cache pre-signed S3 urls to avoid hitting the network