option to load AWS keys from env vars