use IAM authentication to access to private S3