remove read-only aws creds; bucket permissions fixed