removing references to aws creds, so it hopefully falls back to the iam