Now works without key and secret, so it can use IAM roles instead