don't encode the S3 key, rather encode the path in the signature