update for use without IAM