keep standard variables on AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY