using config vars for AWS keys