ec2 credential model spec