use env vars for AWS keys