domain-style AWS s3 urls, crossOrigin for img