back to using IAM role credentials