updates how bucket access is configured.

This will allow instance profiles to be used without passing a key and secret around.