The reason for using the pip package here is that the latest version supports using IAM roles so we don't have to ship credentials.