ensure S3_CREDENTIALS