Moving away from pre-signed url and using POST with custom policy.