getting system working with s3 download policy