use SHA of AWS key