Move s3 endpoint to secrets