S3 credentials can now be retrieved from an IAM role

Uses the EC2 metadata service; the temporary credentials are cached until they
expire.