Moved to fetch with S3.getObject, we can now use secret buckets... not sure this is a good idea. Other components will definitely break...