S3 is returning a 400 error when trying to sync collections from Automation Hub. The problem is that the basic auth credentials set on the remote are getting sent to S3. Pulp is making a call to Automation Hub with the necessary basic auth credentials and then AH is redirecting Pulp to S3. Pulp is sending these basic auth credentials to S3 when it should not. Looks like if we set the credentials on the request instead of the session, aiohttp will only send the credentials to redirected locations when the domains match which is the behavior we want.