based on docs, looks like i had the AWS bits wrong