AWS keys now safely as external data