We use deb-s3[1] to maintain a custom apt repository in s3. It supports signed release files and does all the hard work for you.

[1]: https://github.com/krobertson/deb-s3