reference s3 creds