externalised aws credential configuration
* no point to put them in git on internet
* may pass as -DawsAccessKey=XXX -DawsSecretKey=XXX from mvn build command line