I wanted to add a 2K public key, could be split up but annoying solution. Used a IAM role with rights to an S3 object in the end.