Use IAM role as fallback when AWS credentials are not provided