aws_secret_key/aws_access_key can be replaced with configuration (default: ENV value)