Fetch AWS creds+region from process.env, config file, or IAM/IMD