DIGITAL-3184 use s3 credz

Just to be consistent with Carrierwave. For some reason most sdks use `ACCESS_KEY_ID` and `SECRET_ACCESS_KEY` but all the hashicorp stuff use `ACCESS_KEY` and `SECRET_KEY`