make it work with aws roles