Ensuring global services (such as IAM) use the correct credential scope