Isn't this just `aws_access_key` above? why do you need to repeat the `getenv` call?