allow aws secret token for authentication