looks like i might be missing a policy file.. though the key is GET able.