Use IAM roles instead of hard-coded creds. Hacky.
Don't fail if creds.json is missing--we use IAM.