use environment variable to reference aws_deploy_key