s3://[[access-key:secret-key]:sign-region]@endpoint-url/folder-or-bucket/ Access key and Secret key could come from default AWS SDK chain (environment, container etc ...