OK, since we use CloudFront, I have to use the s3 bucket directly or change our cloudfront config to forward querystrings. Just going with S3 bucket for now