do not encrypt aws_access_key_id to keep better reference of used key (this is not sensitive)