Refactor out aws signing logic

[eetee]

❔ I see this pattern is repeated a lot in this module; is it useful to refactor into a separate function?

Originally posted by @todofixthis in #16