Generate a signed URL for a private S3 object