pass in AWS credentials in opts