Use env var name AWS_SECRET_KEY (more standard), not AWS_SECRET_ACCESS_KEY