replaced in-place AWS keys with ENV[]