credential keys now actually work when set via env
all credential keys are converted to uppercase, dashes replaced with underscores and prefixed with 'AWS_'