Seems like AWS S3 requests must include the resource path with the initial '/' or signatures are invalid.