Also useful for authenticated downloads - don't tie up an app thread, but have your app redirect to a pre-signed url