Three settings control AWS proxy request signing, all defaulting to deny with a 403.
What's wrong with this entry?
Settings expose three policies for AWS requests passing through the proxy, covering streaming, presigned and sigv4a requests. Each accepts deny or passthrough, and deny is documented as the default: the request fails closed with a 403. passthrough forwards it without re-signing, which the upstream service will reject on signature grounds.
` deny (default) fails closed with a 403; passthrough forwards the request unre-signed (the upstream will reject its signature). `
Strings lifted out of the shipped bundle, so the claim above can be checked against them.