There is no simple way to configure GCS to serve the desired security headers, so instead the script will keep updating the existing s3 bucket. Consequent changes: - Add aws cli tool to dev-env - Remove docs bucket from Terraform