syn with upstream signifyd_nexus cb
add AWS keys to CFN