Generate a pre-signed URL for an object in a private S3 bucket