Playing around with a proxy service over s3 to implement abac controls