If you're using AWS SDK to implement and have AWS Config set up properly, then I don't think you'll need the keys to be specified in your code. Even if you're testing it in a lambda function you'll not need it unless you're trying to generate the URL for an s3 bucket outside from your AWS account.