S3 credentials can now be retrieved from an IAM role

Uses the EC2 metadata service; the temporary credentials are cached
until they expire.