add s3_token service
add s3 upload
add environment configs and encrypted key (with prompt)
refactor aws config