update readme to mention getting keys from IAM roles