Add missing $SUDO
Use full path to helper script
Check for AWS_*_KEY vars early