figured out I can allow anonymous s3 bucket access as my alternative to authenticating!